Low
CVE-2023-41044
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,602
Reset filters
Low
CVE-2023-41045
Graylog vulnerable to insecure source port usage for DNS queries
Low
CVE-2023-41041
Graylog user session is still usable after logout
Critical
CVE-2022-46365
Apache StreamPark Improper Input Validation vulnerability
High
CVE-2023-28685
Jenkins AbsInt a³ Plugin XML External Entity Reference vulnerability
Critical
CVE-2022-24697
Apache Kylin vulnerable to remote code execution
High
CVE-2023-2422
Keycloak vulnerable to Improper Client Certificate Validation for OAuth/OpenID clients
Low
CVE-2023-2585
Client Spoofing within the Keycloak Device Authorisation Grant
High
CVE-2023-3432
PlantUML Server-Side Request Forgery vulnerability
Critical
CVE-2021-31635
jFinal Server-Side Template Injection vulnerability
Medium
CVE-2023-25499
Vaadin vulnerable to possible information disclosure in non visible components.
Low
CVE-2023-25500
Vaadin vulnerable to possible information disclosure of class and method names in RPC response
Medium
CVE-2023-35925
FastAsyncWorldEdit vulnerable to Uncontrolled Resource Consumption
High
CVE-2023-35151
XWiki Platform may show email addresses in clear in REST results
Medium
CVE-2023-34462
netty-handler SniHandler 16MB allocation
Medium
CVE-2023-35143
Stored XSS vulnerability in Jenkins Maven Repository Server Plugin
Medium
CVE-2023-35144
Stored XSS vulnerability in Jenkins Maven Repository Server Plugin
High
CVE-2023-35142
SSL/TLS certificate validation disabled by default in Jenkins Checkmarx Plugin
Medium
CVE-2021-26920
Druid ingestion system Authenticated users can read data from other sources than intended
Critical
CVE-2023-35042
GeoServer RCE due to improper control of generation of code in jai-ext`Jiffle` map algebra language
Medium
CVE-2023-33950
Liferay Portal has Inefficient Regular Expression
High
CVE-2023-33945
SQL injection in Liferay Portal
High
Exploited in attacks
CVE-2023-32315
Administration Console authentication bypass in openfire xmppserver
Medium
CVE-2023-32988
Jenkins Azure VM Agents Plugin missing permission checks
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.