Medium
CVE-2023-30530
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,602
Reset filters
Low
CVE-2023-30528
Jenkins WSO2 Oauth Plugin does not mask the WSO2 Oauth client secret on the global configuration form
Low
CVE-2023-30527
Jenkins WSO2 Oauth Plugin stores WSO2 Oauth client secret unencrypted in global config.xml file on Jenkins controller
Medium
CVE-2023-30523
Jenkins Report Portal Plugin allows users with Item/Extended Read permission to view tokens on Jenkins controller
Medium
CVE-2023-30531
Jenkins Consul KV Builder Plugin stores HashiCorp Consul ACL Token unencrypted
High
CVE-2023-26269
Apache James server's JMX management service vulnerable to privilege escalation by local user
Medium
CVE-2023-28675
Jenkins OctoPerf Load Testing Plugin missing permission check allows for unauthorized server connections
High
CVE-2023-28681
Jenkins Visual Studio Code Metrics Plugin vulnerable to XML external entity (XXE) attacks
High
CVE-2023-28680
Jenkins Crap4J Plugin vulnerable to XML external entity (XXE) attacks
Medium
CVE-2023-28674
Jenkins OctoPerf Load Testing Plugin vulnerable to Cross-site Request Forgery
High
CVE-2023-28683
Jenkins Phabricator Differential Plugin vulnerable to XML external entity (XXE) attacks
High
CVE-2023-28684
Jenkins remote-jobs-view-plugin vulnerable to XML external entity attacks
High
CVE-2023-28682
Jenkins Performance Publisher Plugin vulnerable to XML external entity (XXE) attacks
High
CVE-2023-27025
RuoYi vulnerable to arbitrary file download
Critical
CVE-2023-27162
OpenAPI Generator vulnerable to Server-Side Request Forgery
Critical
CVE-2023-28462
Payara Server allows remote attackers to load malicious code on the server once a JNDI directory scan is performed
High
CVE-2023-0100
Improper Input Validation In Eclipse BIRT
High
CVE-2023-27480
XWiki Platform vulnerable to data leak via Improper Restriction of XML External Entity Reference
Critical
CVE-2023-26477
org.xwiki.platform:xwiki-platform-flamingo-theme-ui Eval Injection vulnerability
Medium
ghsa-9vx8-f5c4-862x
XML External Entity (XXE) vulnerability in apoc.import.graphml
Critical
CVE-2022-4492
Undertow client not checking server identity presented by server certificate in https connections
Critical
CVE-2023-25158
GeoTools OGC Filter SQL Injection Vulnerabilities
Critical
CVE-2023-25157
GeoServer OGC Filter SQL Injection Vulnerabilities
Medium
CVE-2023-23926
XML External Entity (XXE) vulnerability in apoc.import.graphml
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.