Medium
CVE-2023-32990
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filters
Medium
CVE-2023-32979
Jenkins Email Extension Plugin missing permission check
Medium
CVE-2023-32995
Jenkins SAML Single Sign On(SSO) Plugin Cross-Site Request Forgery vulnerability
High
CVE-2023-32997
Jenkins CAS Plugin Session Fixation vulnerability
Medium
CVE-2023-32996
Jenkins SAML Single Sign On(SSO) Plugin missing permission checks
Medium
CVE-2023-32989
Jenkins Azure VM Agents Plugin Cross-site Request Forgery vulnerability
High
CVE-2023-33005
Jenkins WSO2 Oauth Plugin Session Fixation vulnerability
Medium
CVE-2023-32980
Jenkins Email Extension Plugin Cross-Site Request Forgery vulnerability
Medium
CVE-2023-2632
Jenkins Code Dx Plugin stores API keys in plain text
Medium
CVE-2023-2633
Jenkins Code Dx Plugin displays API keys in plain text
Medium
CVE-2023-32981
Jenkins Pipeline Utility Steps Plugin arbitrary file write vulnerability
Medium
CVE-2023-32983
Jenkins Ansible Plugin job configuration form does not mask variables
Medium
CVE-2023-32068
org.xwiki.platform:xwiki-platform-oldcore Open Redirect vulnerability
Critical
CVE-2022-47937
Apache Sling Commons JSON bundle vulnerable to Improper Input Validation
Medium
CVE-2024-23689
ClickHouse vulnerable to client certificate password exposure in client exception
High
CVE-2023-29032
Apache OpenMeetings Improper Authentication vulnerability
High
CVE-2023-29246
Apache OpenMeetings vulnerable to remote code execution via null-bye injection
Critical
CVE-2023-32070
Improper Neutralization of Script in Attributes in XWiki (X)HTML renderers
Critical
CVE-2023-32069
Privilege escalation (PR)/RCE from account through class sheet
Medium
CVE-2023-31141
OpenSearch issue with fine-grained access control during extremely rare race conditions
Critical
CVE-2023-31126
Improper Neutralization of Invalid Characters in Data Attribute Names in org.xwiki.commons:xwiki-commons-xml
Critical
CVE-2023-32071
XWiki Platform vulnerable to RXSS via editor parameter - importinline template
High
CVE-2020-22755
MCMS vulnerable to arbitrary code execution via crafted thumbnail
High
CVE-2023-32007
** UNSUPPORTED WHEN ASSIGNED ** The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.