Critical
CVE-2023-31098
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
High
CVE-2023-28709
Apache Tomcat - Fix for CVE-2023-24998 was incomplete
Critical
CVE-2023-31062
Apache InLong Improper Privilege Management vulnerability
High
CVE-2023-31058
Apache InLong Deserialization of Untrusted Data Vulnerability
High
CVE-2023-31103
Apache InLong Exposure of Resource to Wrong Sphere vulnerability
High
CVE-2023-31453
Apache InLong Incorrect Permission Assignment for Critical Resource Vulnerability
High
CVE-2023-31064
Apache InLong has Files or Directories Accessible to External Parties
High
CVE-2023-31454
Apache InLong vulnerable to Incorrect Permission Assignment for Critical Resource
Critical
CVE-2023-31066
Apache InLong has Files or Directories Accessible to External Parties in Apache InLong
High
CVE-2023-31206
Apache InLong Exposure of Resource to Wrong Sphere vulnerability
Critical
CVE-2023-31065
Apache InLong Insufficient Session Expiration vulnerability
Medium
CVE-2023-28936
Apache OpenMeetings insufficient authorization vulnerability
High
CVE-2022-45048
Apache Ranger code execution vulnerability in policy expressions
High
CVE-2023-37260
league/oauth2-server key exposed in exception message when passing as a string and providing an invalid pass phrase
Medium
CVE-2023-36828
Statamic's Antlers sanitizer cannot effectively sanitize malicious SVG
Low
CVE-2023-41044
Graylog server has partial path traversal vulnerability in Support Bundle feature
Low
CVE-2023-41045
Graylog vulnerable to insecure source port usage for DNS queries
Low
CVE-2023-41041
Graylog user session is still usable after logout
Medium
CVE-2023-30776
Apache Superset vulnerable to Exposure of Sensitive Information
Critical
CVE-2022-45802
Apache StreamPark Path Traversal vulnerability
Critical
CVE-2022-46365
Apache StreamPark Improper Input Validation vulnerability
Medium
CVE-2023-25504
Apache Superset Server-Side Request Forgery vulnerability
Medium
CVE-2023-30465
Apache InLong SQL Injection vulnerability
Critical
CVE-2023-27602
Apache Linkis Unrestricted File Upload vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.