Medium
CVE-2023-50298
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 361
Reset filters
Medium
CVE-2023-34042
Spring Security's spring-security.xsd file is world writable
Low
CVE-2024-22236
Spring Cloud Contract vulnerable to local information disclosure
Medium
CVE-2023-27150
OpenCRX Cross-site Scripting vulnerability
High
CVE-2023-50767
Jenkins Nexus Platform Plugin missing permission check
High
CVE-2023-50766
Jenkins Nexus Platform Plugin Cross-Site Request Forgery vulnerability
High
CVE-2023-49656
Jenkins MATLAB Plugin XML External Entity vulnerability
High
CVE-2023-49654
Jenkins MATLAB Plugin missing permission checks
High
CVE-2023-49655
Jenkins MATLAB Plugin cross-site request forgery vulnerability
High
CVE-2023-5245
Zip slip in mleap
High
CVE-2023-39913
Apache UIMA Java SDK Deserialization of Untrusted Data, Improper Input Validation vulnerability
High
CVE-2023-46659
Jenkins Edgewall Trac Plugin vulnerable to Stored XSS
Low
CVE-2023-46122
sbt vulnerable to arbitrary file write via archive extraction (Zip Slip)
High
CVE-2023-43667
SQL Injection in Apache InLong
High
ghsa-86q5-qcjc-7pv4
Presto JDBC Server-Side Request Forgery by nextUri
High
ghsa-xm7x-f3w2-4hjm
Presto JDBC Server-Side Request Forgery by redirect
High
CVE-2023-40828
pf4j vulnerable to remote code execution via expandIfZip method in the extract function
High
CVE-2023-37460
Arbitrary File Creation in AbstractUnArchiver
Medium
CVE-2023-37942
Jenkins External Monitor Job Type Plugin XML external entity vulnerability
Low
CVE-2023-41041
Graylog user session is still usable after logout
Medium
CVE-2023-30465
Apache InLong SQL Injection vulnerability
High
CVE-2023-28685
Jenkins AbsInt a³ Plugin XML External Entity Reference vulnerability
High
Exploited in attacks
CVE-2023-32315
Administration Console authentication bypass in openfire xmppserver
High
CVE-2023-32992
Jenkins SAML Single Sign On(SSO) Plugin missing permission checks
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.