High
CVE-2023-46659
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filters
Critical
CVE-2023-44794
SaToken privilege escalation vulnerability
High
CVE-2023-43961
SaToken authentication bypass vulnerability
High
CVE-2023-31582
jose4j uses weak cryptographic algorithm
Medium
CVE-2023-31580
light-oauth2 missing public key verification
Critical
CVE-2023-31581
Sureness uses hardcoded key
High
CVE-2023-43795
WPS Server Side Request Forgery vulnerability
Medium
CVE-2023-41339
Unsecured WMS dynamic styling sld=<url> parameter affords blind unauthenticated SSRF
Low
CVE-2023-46122
sbt vulnerable to arbitrary file write via archive extraction (Zip Slip)
Medium
CVE-2023-46120
RabbitMQ Java client's Lack of Message Size Limitation leads to Remote DoS Attack
Medium
CVE-2023-44483
Apache Santuario - XML Security for Java are vulnerable to private key disclosure
Medium
CVE-2023-45280
Yamcs Cross-site Scripting vulnerability
Medium
CVE-2023-45279
Yamcs Cross-site Scripting vulnerability
High
CVE-2023-45277
Yamcs Path Traversal vulnerability
Critical
CVE-2023-45278
Yamcs API Directory Traversal vulnerability
High
CVE-2023-46227
Apache InLong Deserialization of Untrusted Data Vulnerability
Medium
CVE-2023-25753
Apache Shenyu Server Side Request Forgery vulnerability
High
CVE-2023-22102
MySQL Connectors takeover vulnerability
Critical
CVE-2023-42627
Liferay Portal and Liferay DXP Vulnerable to XSS in the Commerce Module
Medium
CVE-2023-45807
OpenSearch Issue with tenant read-only permissions
High
ghsa-8wx3-324g-w4qq
OpenSearch uncontrolled resource consumption
Medium
CVE-2023-45669
WebAuthn4J Spring Security Improper signature counter value handling
Critical
CVE-2023-45144
XWiki Identity Oauth Privilege escalation (PR)/remote code execution from login screen through unescaped URL parameter
Critical
CVE-2023-42628
Liferay Portal and Liferay DXP Vulnerable to XSS in the Wiki Widget
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.