Medium
CVE-2025-47886
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,073
Reset filters
Critical
CVE-2025-47884
Jenkins OpenID Connect Provider Plugin Incorrectly Validates Crafted Build ID Tokens
High
CVE-2025-47885
Jenkins Health Advisor by CloudBees Plugin Vulnerable to Cross-Site Scripting
Medium
CVE-2025-47888
Jenkins DingTalk Plugin Unconditionally Disables SSL/TLS Certificate and Hostname Validation
Critical
CVE-2025-4641
BoniGarcia WebDriverManager Affected By Improper Restriction of XML External Entity Reference
Medium
CVE-2025-26795
Apache IoTDB JDBC Driver Discloses Sensitive Information via Log Files
Critical
CVE-2024-24780
Remote Code Execution with untrusted URI of UDF vulnerability in Apache IoTDB. The attacker who has privilege to create UDF can register malicious function from untrusted URI.
Medium
CVE-2025-26864
Exposure of Sensitive Information to an Unauthorized Actor, Insertion of Sensitive Information into Log File vulnerability in the OpenIdAuthorizer of Apache IoTDB.
Low
CVE-2025-46392
Apache Commons Configuration Uncontrolled Resource Consumption
High
CVE-2025-1948
Eclipse Jetty HTTP/2 client can force the server to allocate a humongous byte buffer that may lead to OoM and subsequently the JVM to exit
High
CVE-2024-13009
**UNSUPPORTED WHEN ASSIGNED** GzipHandler causes part of request body to be seen as request body of a separate request
Medium
CVE-2025-46551
JRuby-OpenSSL has hostname verification disabled by default
High
CVE-2025-46827
Graylog Allows Session Takeover via Insufficient HTML Sanitization
High
ghsa-q9q2-3ppx-mwqf
Graylog Allows Stored Cross-Site Scripting via Files Plugin and API Browser
Medium
CVE-2025-27533
Apache ActiveMQ: Unchecked buffer length can cause excessive memory allocation
Medium
CVE-2025-2901
HAL Cross Site Scripting (XSS) vulnerability of user input when storing it in a data store
Medium
CVE-2025-4388
Liferay Portal Reflected XSS in marketplace-app-manager-web
High
CVE-2025-46762
Apache Parquet Java: Potential malicious code execution from trusted packages in the parquet-avro module when reading an Avro schema from a Parquet file metadata
Critical
CVE-2025-45616
BRCC Incorrect Access Control vulnerability
Critical
CVE-2025-2905
WSO2 API Manager XML External Entity (XXE) vulnerability
Medium
CVE-2024-52979
Elasticsearch Uncontrolled Resource Consumption Vulnerability
Medium
CVE-2025-3910
Keycloak vulnerable to two factor authentication bypass
High
CVE-2025-3501
Keycloak hostname verification
Critical
CVE-2025-46558
org.xwiki.contrib.markdown:syntax-markdown-commonmark12 vulnerable to XSS via Markdown content
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.