Medium
CVE-2023-41339
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filters
Low
CVE-2023-46122
sbt vulnerable to arbitrary file write via archive extraction (Zip Slip)
Medium
CVE-2023-46120
RabbitMQ Java client's Lack of Message Size Limitation leads to Remote DoS Attack
Medium
CVE-2023-45280
Yamcs Cross-site Scripting vulnerability
Medium
CVE-2023-45807
OpenSearch Issue with tenant read-only permissions
High
ghsa-8wx3-324g-w4qq
OpenSearch uncontrolled resource consumption
Medium
CVE-2023-45669
WebAuthn4J Spring Security Improper signature counter value handling
Critical
CVE-2023-45144
XWiki Identity Oauth Privilege escalation (PR)/remote code execution from login screen through unescaped URL parameter
Critical
CVE-2023-45138
XWiki Change Request Application UI XSS and remote code execution through change request title
Critical
CVE-2023-44981
Authorization Bypass Through User-Controlled Key vulnerability in Apache ZooKeeper
Medium
CVE-2023-45648
Apache Tomcat Improper Input Validation vulnerability
Medium
Exploited in attacks
CVE-2023-44487
HTTP/2 Stream Cancellation Attack
High
CVE-2023-36478
HTTP/2 HPACK integer overflow and buffer allocation
Medium
CVE-2023-42794
Apache Tomcat Incomplete Cleanup vulnerability
Medium
CVE-2023-43643
mXSS in AntiSamy
High
CVE-2023-45303
ThingsBoard Server-Side Template Injection
Medium
CVE-2023-36820
io.micronaut.security:micronaut-security-oauth2 has invalid IdTokenClaimsValidator logic on aud
High
ghsa-86q5-qcjc-7pv4
Presto JDBC Server-Side Request Forgery by nextUri
High
ghsa-xm7x-f3w2-4hjm
Presto JDBC Server-Side Request Forgery by redirect
High
CVE-2023-39410
Apache Avro Java SDK vulnerable to Improper Input Validation
Medium
CVE-2022-4245
codehaus-plexus vulnerable to XML injection
High
CVE-2022-4244
plexus-codehaus vulnerable to directory traversal
High
CVE-2023-43642
snappy-java's missing upper bound check on chunk length can lead to Denial of Service (DoS) impact
High
CVE-2023-43496
Jenkins temporary plugin file created with insecure permissions
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.