High
CVE-2025-23015
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 546
Reset filters
Medium
CVE-2025-23367
WildFly improper RBAC permission
Critical
CVE-2025-23215
PMD Designer's release key passphrase (GPG) available on Maven Central in cleartext
Critical
CVE-2025-0851
Deep Java Library path traversal issue
Low
CVE-2025-24783
Apache Cocoon vulnerable to Incorrect Usage of Seeds in Pseudo-Random Number Generator
High
CVE-2025-24398
Bitbucket Server Integration Plugin allows bypassing CSRF protection for any URL
Critical
CVE-2025-23025
XWiki Realtime WYSIWYG Editor extension allows privilege escalation (PR) through realtime WYSIWYG editing
Critical
CVE-2024-54676
Apache OpenMeetings vulnerable to Deserialization of Untrusted Data
Critical
CVE-2024-55875
http4k has a potential XXE (XML External Entity Injection) vulnerability
Low
CVE-2024-54140
sigstore-java has a vulnerability with bundle verification
Medium
CVE-2024-53267
sigstore-java has vulnerability with bundle verification
High
CVE-2024-52506
Graylog concurrent PDF report rendering can leak other users' reports
High
CVE-2024-52551
Restarting a run with revoked script approval allowed by Jenkins Pipeline: Declarative Plugin
Medium
CVE-2024-47535
Denial of Service attack on windows app using netty
Medium
ghsa-mpcw-3j5p-p99x
Butterfly's parseJSON, getJSON functions eval malicious input, leading to remote code execution (RCE)
Critical
CVE-2024-47883
Butterfly has path/URL confusion in resource handling leading to multiple weaknesses
Medium
CVE-2024-47882
OpenRefine's error page lacks escaping, leading to potential Cross-site Scripting on import of malicious project
High
CVE-2024-47881
OpenRefine's SQLite integration allows filesystem access, remote code execution (RCE)
High
CVE-2024-47879
OpenRefine's PreviewExpressionCommand, which is eval, lacks protection against cross-site request forgery (CSRF)
Medium
CVE-2024-47803
Jenkins exposes multi-line secrets through error messages
Low
CVE-2024-47197
Maven Archetype Plugin: Maven Archetype integration-test may package local settings into the published artifact, possibly containing credentials
High
CVE-2024-39928
Apache Linkis Spark EngineConn: Commons Lang's RandomStringUtils Random string security vulnerability
High
CVE-2024-46978
org.xwiki.platform:xwiki-platform-notifications-ui is missing checks for notification filter preferences editions
Medium
CVE-2024-7260
Keycloak Open Redirect vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.