Medium
CVE-2024-41177
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,073
Reset filters
Medium
ghsa-2rjv-cv85-xhgm
OpenSearch unauthorized data access on fields protected by field level security if field is a member of an object
Medium
ghsa-rrmm-wq7q-h4v5
OpenSearch unauthorized data access on fields protected by field masking for fields of type ip, geo_point, geo_shape, xy_point, xy_shape
Medium
CVE-2025-24853
Apache JSPWiki Cross-Site Scripting (XSS) Vulnerability via Header Link Rendering
Medium
CVE-2025-24854
Apache JSPWiki Cross-Site Scripting (XSS) Vulnerability in the Image Plugin
Medium
CVE-2025-54656
Apache Struts Extras Before 2 has an Improper Output Neutralization for Logs Vulnerability
Medium
CVE-2025-7784
Keycloak Privilege Escalation Vulnerability in Admin Console (FGAPv2 Enabled)
Medium
CVE-2025-7365
Keycloak phishing attack via email verification step in first login flow
Medium
CVE-2025-54380
Opencast still publishes global system account credentials
High
CVE-2025-54385
XWiki Platform vulnerable to SQL injection through XWiki#searchDocuments API
Critical
CVE-2025-32429
XWiki Platform vulnerable to SQL injection through getdeleteddocuments.vm template sort parameter
Medium
CVE-2025-7962
Jakarta Mail vulnerable to SMTP Injection
Medium
CVE-2025-49656
Apache Jena allows users with administrator access to create databases files outside the files area of the Fuseki server
High
CVE-2025-50151
Apache Jena doesn't validate file access paths in configuration files uploaded by users with administrator access
Low
CVE-2025-7789
xxl-job has Inadequate Encryption Strength
Low
CVE-2025-7787
XXL-JOB is vulnerable to SSRF attacks
High
CVE-2024-9408
Eclipse GlassFish is vulnerable to Server Side Request Forgery attacks through specific endpoints
Medium
CVE-2024-9343
Eclipse GlassFish is vulnerable to Stored XSS attacks through its Administration Console
Medium
CVE-2024-9342
Eclipse GlassFish is vulnerable to Login Brute Force attacks through unlimited failed login attempts
Medium
CVE-2024-10031
Eclipse GlassFish is vulnerable to Stored XSS attacks through configuration file modifications
Medium
CVE-2024-10032
Eclipse GlassFish is vulnerable to Stored XSS attacks through its Administration Console
Medium
CVE-2024-10029
Eclipse GlassFish is vulnerable to Reflected XSS attacks through its Administration Console
Medium
CVE-2025-22227
Reactor Netty HTTP is vulnerable to credential leaks during chained redirects
Medium
CVE-2025-53622
DSpace is vulnerable to Path Traversal attacks when importing packages using Simple Archive Format
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.