Medium
CVE-2023-1932
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filters
High
CVE-2024-38286
Apache Tomcat Allocation of Resources Without Limits or Throttling vulnerability
High
CVE-2024-51132
HAPI FHIR XML External Entity (XXE) vulnerability
High
CVE-2024-48307
JeecgBoot SQL Injection vulnerability
Critical
CVE-2024-38821
Spring Security vulnerable to Authorization Bypass of Static Resources in WebFlux Applications
High
ghsa-3pg4-qwc8-426r
OpenRefine leaks Google API credentials in releases
Medium
ghsa-mpcw-3j5p-p99x
Butterfly's parseJSON, getJSON functions eval malicious input, leading to remote code execution (RCE)
Critical
CVE-2024-47883
Butterfly has path/URL confusion in resource handling leading to multiple weaknesses
Medium
CVE-2024-47882
OpenRefine's error page lacks escaping, leading to potential Cross-site Scripting on import of malicious project
High
CVE-2024-47881
OpenRefine's SQLite integration allows filesystem access, remote code execution (RCE)
High
CVE-2024-47880
OpenRefine has a reflected cross-site scripting vulnerability (XSS) from POST request in ExportRowsCommand
High
CVE-2024-47879
OpenRefine's PreviewExpressionCommand, which is eval, lacks protection against cross-site request forgery (CSRF)
High
CVE-2024-47878
OpenRefine has a reflected cross-site scripting vulnerability (XSS) in GData extension (authorized.vt)
Critical
CVE-2024-8980
Liferay Portal and Liferay DXP Vulnerable to CSRF in the Script Console
Medium
CVE-2024-49580
JetBrains Ktor information disclosure
High
CVE-2024-45217
Insecure Default Initialization of Resource vulnerability in Apache Solr
Critical
CVE-2024-45216
Improper Authentication vulnerability in Apache Solr
High
CVE-2024-47876
SAK-50571 Sakai Kernel users created with type roleview can login as a normal user
Medium
CVE-2024-6763
Eclipse Jetty URI parsing of invalid authority
Medium
CVE-2024-9823
Eclipse Jetty has a denial of service vulnerability on DosFilter
Critical
CVE-2023-25581
pac4j-core affected by a Java deserialization vulnerability
Medium
CVE-2024-47803
Jenkins exposes multi-line secrets through error messages
Medium
CVE-2024-47804
Jenkins item creation restriction bypass vulnerability
Medium
CVE-2024-47805
Jenkins Credentials plugin reveals encrypted values of credentials to users with Extended Read permission
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.