Medium
CVE-2023-29016
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filters
High
CVE-2023-26269
Apache James server's JMX management service vulnerable to privilege escalation by local user
Medium
CVE-2023-28671
Jenkins OctoPerf Load Testing Plugin vulnerable to Cross-site Request Forgery
Medium
CVE-2023-28672
Jenkins OctoPerf Load Testing Plugin vulnerable to credential capture
High
CVE-2023-28670
Jenkins Pipeline Aggregator View Plugin vulnerable to Cross-site Scripting
Critical
CVE-2023-27162
OpenAPI Generator vulnerable to Server-Side Request Forgery
Critical
CVE-2023-1784
jeecg-boot vulnerable to improper authentication
High
CVE-2023-28935
Apache UIMA DUCC allows remote code execution
Medium
CVE-2023-28158
Apache Archiva vulnerable to privilege escalation via stored cross-site scripting (XSS)
Critical
CVE-2023-28326
Apache OpenMeetings missing authentication and can allow user impersonation
Medium
CVE-2023-28628
lambdaisland/uri `authority-regex` returns the wrong authority
Medium
CVE-2023-28640
Apiman vulnerable to permissions bypass due to missing check on API key URL
Medium
CVE-2023-27096
Hippo4j allows attacker to obtain sensitive info via ConfigVerifyController function of Tenant Management module
High
CVE-2023-1370
json-smart Uncontrolled Recursion vulnerability
Medium
CVE-2023-0870
OpenNMS Meridian and Horizon vulnerable to Cross-Site Request Forgery
High
CVE-2023-1436
Jettison vulnerable to infinite recursion
High
CVE-2023-27087
Xuxueli xxl-job allows attacker to obtain sensitive information via the pageList parameter
High
CVE-2023-28118
kaml has potential denial of service while parsing input with anchors and aliases
High
CVE-2023-28465
HL7 FHIR Partial Path Zip Slip due to bypass of CVE-2023-24057
High
CVE-2023-27898
Cross-site Scripting vulnerability in Jenkins
Low
CVE-2023-27903
Incorrect Authorization in Jenkins Core
Low
CVE-2023-27904
Information disclosure through error stack traces related to agents
High
CVE-2023-27899
Incorrect Authorization in Jenkins Core
Medium
CVE-2023-27902
Incorrect Permission Preservation in Jenkins Core
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.