High
CVE-2023-29517
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filters
Critical
CVE-2023-29516
XWiki Platform vulnerable to privilege escalation from view right on XWiki.AttachmentSelector
Medium
CVE-2023-29515
XWiki App Within Minutes app grants space admin rights that allows cross-site scripting
Critical
CVE-2023-29514
XWiki vulnerable to Code Injection in template provider administration
Medium
CVE-2023-29513
xwiki-platform-web-templates allows users to be created even when registration is disabled without validation via template macro
Critical
CVE-2023-29512
xwiki-platform-web-templates vulnerable to Eval Injection
Critical
CVE-2023-20873
Spring Boot Security Bypass with Wildcard Pattern Matching on Cloud Foundry
Critical
CVE-2023-29528
Cross-site Scripting in org.xwiki.commons:xwiki-commons-xml
Medium
CVE-2023-25601
Apache DolphinScheduler's python gateway suffered from improper authentication
Critical
CVE-2023-29926
PowerJob vulnerable to remote code execution
Medium
CVE-2023-29922
PowerJob vulnerable to Incorrect Access Control via the create user/save interface.
Medium
CVE-2023-20862
Spring Security logout not clearing security context
Critical
CVE-2023-29510
Code injection via unescaped translations in xwiki-platform
Medium
CVE-2023-26048
OutOfMemoryError for large multipart without filename in Eclipse Jetty
Medium
CVE-2023-29923
PowerJob vulnerable to Insecure Permissions
Medium
CVE-2023-29921
PowerJob Incorrect Access Control vulnerability
Low
CVE-2023-26049
Eclipse Jetty's cookie parsing of quoted values can exfiltrate values from other cookies
Critical
CVE-2023-24831
Improper Authentication vulnerability in Apache Software Foundation Apache IoTDB.This issue affects Apache IoTDB Grafana Connector: from 0.13.0 through 0.13.3.
Critical
CVE-2023-22946
In Apache Spark versions prior to 3.4.0, applications using spark-submit can specify a 'proxy-user' to run as, limiting privileges. The application can execute code with the privileges of the submitti
High
CVE-2023-30535
Snowflake JDBC vulnerable to command injection via SSO URL authentication
High
CVE-2023-20863
Spring Framework vulnerable to denial of service
Medium
CVE-2023-20866
Spring Session session ID can be logged to the standard output stream
High
CVE-2022-45064
Apache Sling Engine vulnerable to cross-site scripting (XSS) that can lead to privilege escalation
High
CVE-2023-29207
Improper Neutralization of Script-Related HTML Tags (XSS) in the LiveTable Macro
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.