Medium
CVE-2024-23901
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filters
Low
CVE-2024-23903
Non-constant time webhook token comparison in Jenkins GitLab Branch Source Plugin
Critical
CVE-2024-23636
Remote Command Execution in SOFARPC
Low
CVE-2024-23686
nvdApiKey is logged in debug mode
Medium
CVE-2024-21733
Apache Tomcat vulnerable to Generation of Error Message Containing Sensitive Information
High
CVE-2023-51282
Code injection in mingSoft MCMS
Medium
CVE-2023-50290
Apache Solr allows read access to host environmet variables
Medium
CVE-2023-6147
Qualys Jenkins Plugin for Policy Compliance XML External Entity vulnerability
Medium
CVE-2023-6148
Qualys Jenkins Plugin for Policy Compliance Cross-site Scripting vulnerability
Medium
CVE-2023-6149
Qualys Jenkins Plugin for WAS XML External Entity vulnerability
High
CVE-2024-21651
XWiki vulnerable to Denial of Service attack through attachments
High
CVE-2024-21648
XWiki has no right protection on rollback action
High
CVE-2024-21634
Ion Java StackOverflow vulnerability
High
CVE-2023-50578
Mingsoft MCMS SQL injection
Critical
CVE-2023-41542
Jeecg Boot SQL injection vulnerability
Critical
CVE-2023-41543
Jeecg Boot SQL Injection
High
CVE-2023-50571
easy-rules-mvel vulnerable to remote code execution
Medium
CVE-2023-7148
ShifuML shifu code injection vulnerability
Medium
CVE-2023-5384
Infinispan caches credentials in clear text
Medium
CVE-2023-51074
json-path Out-of-bounds Write vulnerability
High
CVE-2023-51080
hutool-core was discovered to contain a stack overflow via NumberUtil.toBigDecimal method
Critical
CVE-2023-51084
hyavijava stack overflow vulnerability
High
CVE-2023-51075
hutool-core discovered to contain an infinite loop in the StrSplitter.splitByRegex function
Medium
CVE-2023-27150
OpenCRX Cross-site Scripting vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.