Medium
CVE-2023-50769
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,602
Reset filters
High
CVE-2023-50766
Jenkins Nexus Platform Plugin Cross-Site Request Forgery vulnerability
Medium
CVE-2023-50777
Tokens stored in plain text by PaaSLane Estimate Plugin
Medium
CVE-2023-50773
Displayed in plain text by Dingding JSON Pusher Plugin
Medium
CVE-2023-47327
Broken access control in Silverpeas
Critical
CVE-2023-49093
HtmlUnit vulnerable to Remote Code Execution (RCE) via XSTL
Critical
CVE-2023-48910
Microcks contains a Server-Side Request Forgery (SSRF) via the component /jobs and /artifact/download
Low
CVE-2022-2232
Keycloak vulnerable to LDAP Injection on UsernameForm Login
High
CVE-2023-49656
Jenkins MATLAB Plugin XML External Entity vulnerability
Medium
CVE-2023-49653
Jenkins Jira Plugin vulnerable to exposure of system-scoped credentials
High
CVE-2023-49654
Jenkins MATLAB Plugin missing permission checks
High
CVE-2023-49655
Jenkins MATLAB Plugin cross-site request forgery vulnerability
High
CVE-2023-48848
ureport arbitrary file read vulnerability
High
CVE-2023-34054
Reactor Netty HTTP Server denial of service vulnerability
Critical
CVE-2023-48292
Run Shell Command allows Cross-Site Request Forgery
High
CVE-2023-48241
Whole content of all documents of all wikis exposed to anybody with view right on Solr suggest service
Critical
CVE-2023-48240
Cookies are sent to external images in rendered diff (and server side request forgery)
Critical
CVE-2022-46337
Apache Derby: LDAP injection vulnerability in authenticator
Critical
CVE-2023-6038
H2O local file inclusion vulnerability
High
CVE-2023-34062
In Reactor Netty HTTP Server a malicious user can send a request using a specially crafted URL that can lead to a directory traversal attack
Critical
CVE-2023-46731
XWiki Platform vulnerable to remote code execution through the section parameter in Administration as guest
Medium
CVE-2023-5763
Eclipse Glassfish remote code execution issue
Critical
CVE-2023-37913
org.xwiki.platform:xwiki-platform-office-importer vulnerable to arbitrary server side file writing from account through office converter
Critical
CVE-2023-37908
org.xwiki.rendering:xwiki-rendering-xml Improper Neutralization of Invalid Characters in Identifiers in Web Pages vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.