Critical
CVE-2023-37913
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
High
CVE-2023-37912
XWiki Rendering's footnote macro vulnerable to privilege escalation via the footnote macro
Medium
CVE-2023-37911
org.xwiki.platform:xwiki-platform-oldcore may leak data through deleted and re-created documents
High
CVE-2023-37910
org.xwiki.platform:xwiki-platform-attachment-api vulnerable to Missing Authorization on Attachment Move
High
CVE-2023-37909
Privilege escalation (PR)/remote code execution from account through Menu.UIExtensionSheet
Critical
CVE-2023-37908
org.xwiki.rendering:xwiki-rendering-xml Improper Neutralization of Invalid Characters in Identifiers in Web Pages vulnerability
Low
CVE-2023-46658
Jenkins MSTeams Webhook Trigger Plugin uses non-constant time webhook token comparison
Medium
CVE-2023-46652
Jenkins lambdatest-automation Plugin missing permission check
Low
CVE-2023-46656
Jenkins Multibranch Scan Webhook Trigger Plugin uses non-constant time webhook token comparison
High
CVE-2023-46650
Stored XSS vulnerability in Jenkins GitHub Plugin
Medium
CVE-2023-46651
Jenkins Warnings Plugin exposures system-scoped credentials
Medium
CVE-2023-46655
Jenkins CloudBees CD Plugin vulnerable to arbitrary file read
Low
CVE-2023-46653
Jenkins lambdatest-automation Plugin may expose Credentials access token
Low
CVE-2023-46660
Non-constant time webhook token hash comparison in Jenkins Zanata Plugin
Low
CVE-2023-46657
Jenkins Gogs Plugin uses non-constant time webhook token comparison
High
CVE-2023-46654
Jenkins CloudBees CD Plugin vulnerable to arbitrary file deletion
High
CVE-2023-46659
Jenkins Edgewall Trac Plugin vulnerable to Stored XSS
Critical
CVE-2023-44794
SaToken privilege escalation vulnerability
High
CVE-2023-43961
SaToken authentication bypass vulnerability
Medium
CVE-2023-44769
Zenario CMS Cross-site Scripting vulnerability
High
CVE-2023-39619
Inefficient Regular Expression Complexity in node-email-check
High
CVE-2023-31582
jose4j uses weak cryptographic algorithm
Medium
CVE-2023-31580
light-oauth2 missing public key verification
Critical
CVE-2023-31581
Sureness uses hardcoded key
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.