High
CVE-2023-28678
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filters
Medium
CVE-2023-28671
Jenkins OctoPerf Load Testing Plugin vulnerable to Cross-site Request Forgery
High
CVE-2023-28676
Jenkins Convert To Pipeline Plugin vulnerable to cross-site request forgery
High
CVE-2023-28669
Jenkins JaCoCo Plugin vulnerable to Stored Cross-site Scripting
Medium
CVE-2023-28668
Jenkins Role-based Authorization Strategy Plugin grants permissions even after they’ve been disabled
High
CVE-2023-28677
Jenkins Convert To Pipeline Plugin vulnerable to command injection
Medium
CVE-2023-28675
Jenkins OctoPerf Load Testing Plugin missing permission check allows for unauthorized server connections
Medium
CVE-2023-28672
Jenkins OctoPerf Load Testing Plugin vulnerable to credential capture
High
CVE-2023-28681
Jenkins Visual Studio Code Metrics Plugin vulnerable to XML external entity (XXE) attacks
High
CVE-2023-28680
Jenkins Crap4J Plugin vulnerable to XML external entity (XXE) attacks
High
CVE-2023-28679
Jenkins Mashup Portlets Plugin vulnerable to stored cross-site scripting
Medium
CVE-2023-28674
Jenkins OctoPerf Load Testing Plugin vulnerable to Cross-site Request Forgery
Medium
CVE-2023-28673
Jenkins OctoPerf Load Testing Plugin missing permission check allows for ID enumeration
High
CVE-2023-28670
Jenkins Pipeline Aggregator View Plugin vulnerable to Cross-site Scripting
High
CVE-2023-28683
Jenkins Phabricator Differential Plugin vulnerable to XML external entity (XXE) attacks
High
CVE-2023-28684
Jenkins remote-jobs-view-plugin vulnerable to XML external entity attacks
High
CVE-2023-28682
Jenkins Performance Publisher Plugin vulnerable to XML external entity (XXE) attacks
High
CVE-2023-27025
RuoYi vulnerable to arbitrary file download
High
ghsa-5x5q-8cgm-2hjq
Karate has vulnerable dependency on json-smart package (CVE-2023-1370)
Critical
CVE-2023-27162
OpenAPI Generator vulnerable to Server-Side Request Forgery
Critical
CVE-2023-1784
jeecg-boot vulnerable to improper authentication
Critical
CVE-2023-1741
jeecg-boot vulnerable to SQL injection
Critical
CVE-2023-28462
Payara Server allows remote attackers to load malicious code on the server once a JNDI directory scan is performed
High
CVE-2023-28935
Apache UIMA DUCC allows remote code execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.