Medium
CVE-2023-32982
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,602
Reset filters
Low
CVE-2023-33000
Jenkins NS-ND Integration Performance Publisher Plugin displays credentials without masking
Medium
CVE-2023-32990
Jenkins Azure VM Agents Plugin missing permission checks
Medium
CVE-2023-32978
Jenkins LDAP Plugin vulnerable to Cross-Site Request Forgery
Medium
CVE-2023-32989
Jenkins Azure VM Agents Plugin Cross-site Request Forgery vulnerability
Medium
CVE-2023-2632
Jenkins Code Dx Plugin stores API keys in plain text
High
CVE-2023-32992
Jenkins SAML Single Sign On(SSO) Plugin missing permission checks
Medium
CVE-2023-32987
Jenkins Reverse Proxy Auth Plugin cross-site request forgery vulnerability
High
CVE-2023-32991
Jenkins SAML Single Sign On(SSO) Plugin Cross-Site Request Forgery vulnerability
Medium
CVE-2023-2633
Jenkins Code Dx Plugin displays API keys in plain text
Medium
CVE-2023-32983
Jenkins Ansible Plugin job configuration form does not mask variables
Medium
CVE-2023-32081
Vert.x STOMP server process client frames that would not send initially a connect frame
Critical
CVE-2023-31126
Improper Neutralization of Invalid Characters in Data Attribute Names in org.xwiki.commons:xwiki-commons-xml
Critical
CVE-2023-30331
Server-side template injection in beetl
High
CVE-2023-29517
Exposure of Sensitive Information to an Unauthorized Actor in org.xwiki.platform:xwiki-platform-office-viewer
Medium
CVE-2023-29513
xwiki-platform-web-templates allows users to be created even when registration is disabled without validation via template macro
Critical
CVE-2023-29528
Cross-site Scripting in org.xwiki.commons:xwiki-commons-xml
Medium
CVE-2023-26048
OutOfMemoryError for large multipart without filename in Eclipse Jetty
Low
CVE-2023-26049
Eclipse Jetty's cookie parsing of quoted values can exfiltrate values from other cookies
High
CVE-2023-30535
Snowflake JDBC vulnerable to command injection via SSO URL authentication
Critical
CVE-2023-29201
org.xwiki.commons:xwiki-commons-xml Cross-site Scripting vulnerability
Medium
CVE-2023-30518
Jenkins Thycotic Secret Server Plugin missing permissions check
Medium
CVE-2023-30517
Jenkins NeuVector Vulnerability Scanner Plugin disables SSL/TLS certificate and hostname validation
Medium
CVE-2023-30524
Jenkins Report Portal Plugin configuration form does not mask tokens
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.