High
CVE-2023-29171
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-1126
WP FEvents Book <= 0.46 - Authenticated (Subscriber+) Stored Cross-Site Scripting
High
CVE-2023-29098
CopySafe Web Protection <= 3.13 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2023-28678
Jenkins Cppcheck Plugin vulnerable to stored cross-site scripting (XSS)
Medium
CVE-2023-28671
Jenkins OctoPerf Load Testing Plugin vulnerable to Cross-site Request Forgery
High
CVE-2023-28676
Jenkins Convert To Pipeline Plugin vulnerable to cross-site request forgery
High
CVE-2023-28669
Jenkins JaCoCo Plugin vulnerable to Stored Cross-site Scripting
Medium
CVE-2023-28668
Jenkins Role-based Authorization Strategy Plugin grants permissions even after they’ve been disabled
High
CVE-2023-28677
Jenkins Convert To Pipeline Plugin vulnerable to command injection
Medium
CVE-2023-28675
Jenkins OctoPerf Load Testing Plugin missing permission check allows for unauthorized server connections
Medium
CVE-2023-28672
Jenkins OctoPerf Load Testing Plugin vulnerable to credential capture
High
CVE-2023-28681
Jenkins Visual Studio Code Metrics Plugin vulnerable to XML external entity (XXE) attacks
High
CVE-2023-28680
Jenkins Crap4J Plugin vulnerable to XML external entity (XXE) attacks
High
CVE-2023-28679
Jenkins Mashup Portlets Plugin vulnerable to stored cross-site scripting
Medium
CVE-2023-28674
Jenkins OctoPerf Load Testing Plugin vulnerable to Cross-site Request Forgery
Medium
CVE-2023-28673
Jenkins OctoPerf Load Testing Plugin missing permission check allows for ID enumeration
High
CVE-2023-28670
Jenkins Pipeline Aggregator View Plugin vulnerable to Cross-site Scripting
High
CVE-2023-28683
Jenkins Phabricator Differential Plugin vulnerable to XML external entity (XXE) attacks
High
CVE-2023-28684
Jenkins remote-jobs-view-plugin vulnerable to XML external entity attacks
High
CVE-2023-28682
Jenkins Performance Publisher Plugin vulnerable to XML external entity (XXE) attacks
High
CVE-2023-27025
RuoYi vulnerable to arbitrary file download
Medium
CVE-2023-23719
Premmerce <= 1.3.18 - Cross-Site Request Forgery via runAction
Medium
CVE-2023-1789
Firefly III vulnerable to improper input validation
Medium
CVE-2023-1404
Weaver Show Posts <= 1.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via Display Name
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.