Medium
CVE-2023-24815
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filters
High
CVE-2023-25194
Apache Kafka Connect vulnerable to Deserialization of Untrusted Data
Medium
CVE-2023-22849
Sling App CMS Cross-site Scripting vulnerability
Medium
CVE-2023-0674
Cross-Site Request Forgery in XXL Job
High
CVE-2021-37305
Insecure Permissions issue in jeecg-boot
High
CVE-2021-37306
Insecure Permissions issue in jeecg-boot
High
CVE-2021-37304
Insecure Permissions issue in jeecg-boot
Critical
CVE-2023-24997
Apache InLong vulnerable to Deserialization of Untrusted Data vulnerability
High
CVE-2023-24977
Apache InLong contains Out-of-bounds Read vulnerability
Critical
CVE-2023-24163
Dromara hutool vulnerable to SQL Injection
Critical
CVE-2023-24162
Dromara Hutool Deserialization of Untrusted Data vulnerability
High
CVE-2022-44645
Apache Linkis contains Deserialization of Untrusted Data
Medium
CVE-2022-44644
Apache Linkis vulnerable to Exposure of Sensitive Information
Medium
CVE-2022-25881
http-cache-semantics < 4.1.1 - Regular Expression Denial of Service (ReDoS)
Medium
CVE-2022-2712
Path Traversal In Eclipse GlassFish
Critical
CVE-2022-25894
Remote Code Execution in com.bstek.uflo:uflo-core
High
CVE-2022-47042
Arbitrary file write in net.mingsoft:ms-mcms
High
CVE-2023-24422
Sandbox bypass in Jenkins Script Security Plugin
Critical
CVE-2023-24441
XML external entity vulnerability on agents in Jenkins MSTest Plugin
Medium
CVE-2023-24425
Exposure of system-scoped Kubernetes credentials in Jenkins Kubernetes Credentials Provider Plugin
Medium
CVE-2023-24437
Cross-site request forgery vulnerability in Jenkins JIRA Pipeline Steps Plugin
High
CVE-2023-24444
Session fixation vulnerability in Jenkins OpenID Plugin
Critical
CVE-2023-24456
Session fixation vulnerability in Jenkins Keycloak Authentication Plugin
Medium
CVE-2023-24436
Jenkins GitHub Pull Request Builder Plugin missing permission check allows enumerating credentials IDs
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.