Critical
CVE-2023-35161
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filters
Critical
CVE-2023-35160
XWiki Platform vulnerable to reflected cross-site scripting via back and xcontinue parameters in resubmit template
Critical
CVE-2023-35159
XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in deletespace template
Critical
CVE-2023-35158
XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in restore template
High
CVE-2023-35157
XWiki Platform vulnerable to reflected cross-site scripting via delattachment action
Critical
CVE-2023-35156
XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in delete template
High
CVE-2022-24839
org.nokogiri:nekohtml vulnerable to Uncontrolled Resource Consumption
Medium
CVE-2023-33725
Broadleaf vulnerable to Cross-site Scripting
Critical
CVE-2023-34340
Apache Accumulo Improper Authentication vulnerability
High
CVE-2023-35166
XWiki Platform vulnerable to privilege escalation (PR) from account through TipsPanel
Critical
CVE-2023-35162
XWiki Platform vulnerable to cross-site scripting via xcontinue parameter in previewactions template
High
CVE-2023-35155
XWiki Platform vulnerable to cross-site scripting in target parameter via share page by email
Critical
CVE-2023-35153
XWiki Platform vulnerable to stored cross-site scripting in ClassEditSheet page via name parameters
Critical
CVE-2023-35152
XWiki Platform vulnerable to privilege escalation (PR) from account through like LiveTableResults
High
CVE-2023-35151
XWiki Platform may show email addresses in clear in REST results
Critical
CVE-2023-35150
XWiki Platform vulnerable to privilege escalation (PR) from view right via Invitation application
High
CVE-2023-34467
XWiki Platform may retrieve email addresses of all users
Medium
CVE-2023-34466
XWiki Platform's tags on non-viewable pages can be revealed to users
Critical
CVE-2023-34465
XWiki Platform's Mail.MailConfig can be edited by any user with edit rights
Critical
CVE-2023-34464
XWiki vulnerable to stored cross-site scripting via any wiki document and the displaycontent/rendercontent template
Medium
CVE-2023-34462
netty-handler SniHandler 16MB allocation
Medium
CVE-2023-34603
JeecgBoot vulnerable to SQL injection in queryFilterTableDictInfo
Medium
CVE-2023-34602
JeecgBoot vulnerable to SQL injection in queryTableDictItemsByCode
High
CVE-2023-34455
snappy-java's unchecked chunk length leads to DoS
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.