Medium
CVE-2023-28158
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filters
Medium
CVE-2023-25722
Veracode Scan Jenkins Plugin vulnerable to information disclosure
Medium
CVE-2023-25721
Veracode Scan Jenkins Plugin vulnerable to information disclosure
Critical
CVE-2023-28326
Apache OpenMeetings missing authentication and can allow user impersonation
Critical
CVE-2023-20860
Spring Framework is vulnerable to security bypass via mvcRequestMatcher pattern mismatch
Medium
CVE-2023-28628
lambdaisland/uri `authority-regex` returns the wrong authority
Medium
CVE-2023-28640
Apiman vulnerable to permissions bypass due to missing check on API key URL
Medium
CVE-2023-27096
Hippo4j allows attacker to obtain sensitive info via ConfigVerifyController function of Tenant Management module
High
CVE-2023-27296
Apache InLong vulnerable to JDBC Deserialization of Untrusted Data
High
CVE-2023-28867
GraphQL Java vulnerable to stack consumption
Medium
CVE-2023-20861
Spring Framework vulnerable to denial of service via specially crafted SpEL expression
Medium
CVE-2023-20859
Spring Vault vulnerable to insertion of sensitive information into a log file
High
CVE-2023-1370
json-smart Uncontrolled Recursion vulnerability
High
CVE-2023-27094
Hippo4j privilege escalation issue
Medium
CVE-2023-0870
OpenNMS Meridian and Horizon vulnerable to Cross-Site Request Forgery
Medium
CVE-2023-28708
Apache Tomcat vulnerable to Unprotected Transport of Credentials
High
CVE-2023-1436
Jettison vulnerable to infinite recursion
High
CVE-2023-27087
Xuxueli xxl-job allows attacker to obtain sensitive information via the pageList parameter
High
CVE-2023-28118
kaml has potential denial of service while parsing input with anchors and aliases
High
CVE-2023-26513
Apache Sling Resource Merger has Excessive Iteration vulnerability
High
CVE-2021-46877
jackson-databind possible Denial of Service if using JDK serialization to serialize JsonNode
Critical
CVE-2023-1454
jeecg-boot SQL Injection vulnerability
Medium
CVE-2023-27095
Exposure of Sensitive Information in OpenGoofy Hippo4j
High
CVE-2023-0100
Improper Input Validation In Eclipse BIRT
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.