Medium
CVE-2024-25151
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filters
Critical
CVE-2023-40191
Liferay Portal and Liferay DXP vulnerable to reflected Cross-site Scripting
High
CVE-2024-25606
Liferay Portal has an XXE vulnerability in Java2WsddTask._format
Medium
CVE-2024-25150
Liferay Portal and Liferay DXP Information Disclosure Vulnerability in the Control Panel
Medium
CVE-2024-25149
Liferay Portal and Liferay DXP Does Not Properly Restrict Membership to Child Site Based on Parent Site Options
High
CVE-2024-1635
Undertow Uncontrolled Resource Consumption Vulnerability
High
CVE-2024-23833
OpenRefine JDBC Attack Vulnerability
High
CVE-2023-50386
Apache Solr: Backup/Restore APIs allow for deployment of executables in malicious ConfigSets
High
CVE-2023-50291
Apache Solr can leak certain passwords due to System Property redaction logic inconsistencies
Low
CVE-2023-50292
Apache Solr Schema Designer blindly "trusts" all configsets
Medium
CVE-2024-23639
Micronaut management endpoints vulnerable to drive-by localhost attack
Medium
CVE-2023-47798
Liferay Portal's account lockout does not invalidate existing user sessions
Medium
CVE-2024-24823
Graylog session fixation vulnerability through cookie injection
High
CVE-2024-24824
Graylog vulnerable to instantiation of arbitrary classes triggered by API request
Medium
CVE-2023-39196
Apache Ozone Improper Authentication vulnerability
High
CVE-2023-51437
Apache Pulsar SASL Authentication Provider observable timing discrepancy vulnerability
Medium
CVE-2024-23635
Malicious input can provoke XSS when preserving comments
Critical
CVE-2024-1143
Central Dogma Authentication Bypass Vulnerability via Session Leakage
Medium
CVE-2024-24565
CrateDB database has an arbitrary file read vulnerability
High
CVE-2023-51982
CrateDB authentication bypass vulnerability
High
CVE-2023-29055
Apache Kylin has Insufficiently Protected Credentials
High
CVE-2023-6267
Quarkus Improper Handling of Insufficient Permissions or Privileges and Improper Handling of Exceptional Conditions vulnerability
Critical
Exploited in attacks
CVE-2024-23897
Arbitrary file read vulnerability through the Jenkins CLI can lead to RCE
High
CVE-2024-23898
Cross-site WebSocket hijacking vulnerability in the Jenkins CLI
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.