High
CVE-2024-52554
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,073
Reset filters
High
CVE-2024-52553
Session fixation vulnerability in Jenkins OpenId Connect Authentication Plugin
Medium
CVE-2024-47535
Denial of Service attack on windows app using netty
High
CVE-2024-51135
powertac-server XML External Entity vulnerability
High
CVE-2024-52007
XXE vulnerability in XSLT parsing in `org.hl7.fhir.core`
High
CVE-2024-47072
XStream is vulnerable to a Denial of Service attack due to stack overflow from a manipulated binary input stream
High
CVE-2024-51504
Apache ZooKeeper: Authentication bypass with IP-based authentication in Admin Server
Medium
CVE-2023-1932
hibernate-validator Cross-site Scripting vulnerability
Medium
CVE-2023-1973
Undertow Denial of Service vulnerability
High
CVE-2024-38286
Apache Tomcat Allocation of Resources Without Limits or Throttling vulnerability
High
CVE-2024-51132
HAPI FHIR XML External Entity (XXE) vulnerability
High
CVE-2024-51127
hornetq vulnerable to file overwrite, sensitive information disclosure
High
CVE-2024-23590
Apache Kylin Session Fixation vulnerability
High
CVE-2024-48307
JeecgBoot SQL Injection vulnerability
Medium
CVE-2024-43382
Snowflake JDBC Security Advisory
Medium
CVE-2024-45477
Apache NiFi Cross-site Scripting vulnerability
Medium
CVE-2024-49771
MPXJ has a Potential Path Traversal Vulnerability
Critical
CVE-2024-38821
Spring Security vulnerable to Authorization Bypass of Static Resources in WebFlux Applications
High
CVE-2024-49760
OpenRefine has a path traversal in LoadLanguageCommand
High
ghsa-3pg4-qwc8-426r
OpenRefine leaks Google API credentials in releases
Medium
ghsa-mpcw-3j5p-p99x
Butterfly's parseJSON, getJSON functions eval malicious input, leading to remote code execution (RCE)
Critical
CVE-2024-47883
Butterfly has path/URL confusion in resource handling leading to multiple weaknesses
Medium
CVE-2024-47882
OpenRefine's error page lacks escaping, leading to potential Cross-site Scripting on import of malicious project
High
CVE-2024-47881
OpenRefine's SQLite integration allows filesystem access, remote code execution (RCE)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.