High
CVE-2023-41937
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filters
Medium
CVE-2023-41932
Path traversal allows exploiting XXE vulnerability in Jenkins Job Configuration History Plugin
High
CVE-2023-40771
DataEase vulnerable to SQL injection
High
CVE-2023-40828
pf4j vulnerable to remote code execution via expandIfZip method in the extract function
High
CVE-2023-40827
pf4j vulnerable to remote code execution via loadpluginPath parameter
High
CVE-2023-40826
pf4j vulnerable to remote code execution via the zippluginPath parameter
Medium
CVE-2023-24620
Esoteric YamlBeans XML Entity Expansion vulnerability
High
CVE-2023-34040
Spring-Kafka has Java Deserialization vulnerability When Improperly Configured
Critical
CVE-2023-40573
XWiki Platform's Groovy jobs check the wrong author, allowing remote code execution
High
CVE-2023-40572
XWiki Platform vulnerable to CSRF privilege escalation/RCE via the create action
Medium
CVE-2023-4301
Jenkins Fortify Plugin cross-site request forgery vulnerability
Medium
CVE-2023-4302
Jenkins Fortify Plugin missing permission check
Critical
CVE-2023-40177
XWiki Platform privilege escalation (PR) from account through AWM content fields
Medium
CVE-2023-40176
XWiki Platform Stored Cross-site Scripting in the user profile via the timezone displayer
High
CVE-2022-46751
Apache Ivy External Entity Reference vulnerability
Medium
CVE-2023-40037
Apache NiFi Insufficient Property Validation vulnerability
Critical
CVE-2023-37914
XWiki Platform privilege escalation (PR)/RCE from account through Invitation subject/message
High
CVE-2023-36106
PowerJob incorrect access control vulnerability
Medium
CVE-2023-38905
Jeecg-boot SQL Injection vulnerability
Low
CVE-2023-40343
Jenkins Tuleap Authentication Plugin non-constant time token comparison
Medium
CVE-2023-40338
Jenkins Folders Plugin information disclosure vulnerability
Medium
CVE-2022-41401
OpenRefine Server-Side Request Forgery vulnerability
Critical
CVE-2023-36480
Aerospike Java Client vulnerable to unsafe deserialization of server responses
Medium
CVE-2023-3426
Liferay Portal and Liferay DXP Organization Selector Does Not Check User Permissions
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.