Medium
CVE-2023-40345
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,602
Reset filters
Medium
CVE-2023-40347
Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin vulnerable to exposure of system-scoped credentials
Medium
CVE-2022-41401
OpenRefine Server-Side Request Forgery vulnerability
Critical
CVE-2023-36480
Aerospike Java Client vulnerable to unsafe deserialization of server responses
Critical
CVE-2023-39013
Code injection in Duke
High
CVE-2023-3442
Missing authorization in Jenkins Plug-in for ServiceNow
Medium
CVE-2023-3414
Credential leakage in Jenkins Plug-in for ServiceNow
Low
CVE-2023-39155
Secret displayed without masking by Chef Identity Plugin
High
CVE-2023-38493
Paths contain matrix variables bypass decorators
High
CVE-2023-37460
Arbitrary File Creation in AbstractUnArchiver
Critical
CVE-2023-37895
Remote code execution in Apache Jackrabbit
Low
CVE-2023-32263
Potential leak of credentials in Micro Focus Dimensions CM Jenkins Plugin
Medium
CVE-2023-32262
Exposure of system-scoped credentials in Jenkins Dimensions Plugin
Medium
CVE-2023-34036
Spring HATEOAS vulnerable to Improper Neutralization of HTTP Headers for Scripting Syntax
High
CVE-2023-38286
Spring-boot-admin sandbox bypass via crafted HTML
Medium
CVE-2023-37951
Jenkins mabl Plugin vulnerable to exposure of system-scooped credentials
Medium
CVE-2023-37942
Jenkins External Monitor Job Type Plugin XML external entity vulnerability
Medium
CVE-2023-37943
Jenkins Active Directory Plugin vulnerable to Active Directory credential disclosure
Critical
CVE-2023-37582
RocketMQ NameServer component Code Injection vulnerability
High
CVE-2022-42009
Apache Ambari Expression Language Injection vulnerability
Critical
CVE-2023-37277
XWiki Platform vulnerable to cross-site request forgery (CSRF) via the REST API
Low
ghsa-58qw-p7qm-5rvh
Eclipse Jetty XmlParser allows arbitrary DOCTYPE declarations
Medium
CVE-2023-35887
Apache MINA SSHD information disclosure vulnerability
Critical
Exploited in attacks
CVE-2023-33246
Apache RocketMQ may have remote code execution vulnerability when using update configuration function
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.