Medium
CVE-2023-5866
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,071
Reset filters
Medium
CVE-2023-5867
Cross-site Scripting (XSS) in thorsten/phpmyfaq
Medium
CVE-2023-5861
Cross-site Scripting (XSS) in microweber/microweber
Medium
CVE-2023-5863
phpMyFAQ Cross-site Scripting vulnerability
High
CVE-2023-46245
Kimai (Authenticated) SSTI to RCE by Uploading a Malicious Twig File
High
CVE-2023-46240
CodeIgniter4 vulnerable to information disclosure when detailed error report is displayed in production environment
Medium
CVE-2023-5842
Cross-site Scripting (XSS) in dolibarr/dolibarr
High
CVE-2023-46468
juzawebCMS Injection vulnerability
Medium
CVE-2023-43792
baserCMS Code Injection Vulnerability in Mail Form Feature
Medium
CVE-2023-43649
baserCMS CSRF vulnerability in Content preview Feature
Medium
CVE-2023-43648
baserCMS Directory Traversal vulnerability in Form submission data management Feature
Medium
CVE-2023-43647
baserCMS Cross-site Scripting vulnerability in File upload Feature
Medium
CVE-2023-29009
baserCMS Cross-site Scripting Vulnerability in Favorites Feature
Medium
CVE-2023-44769
Zenario CMS Cross-site Scripting vulnerability
Medium
CVE-2023-44760
Concrete CMS Cross-site Scripting vulnerability
Medium
CVE-2023-43340
Evolution CMS Cross-site Scripting vulnerability
Medium
CVE-2023-43341
Evolution CMS Cross-site Scripting vulnerability
Medium
CVE-2023-43875
Subrion CMS vulnerable to Cross-site Scripting
Medium
CVE-2023-45819
TinyMCE XSS vulnerability in notificationManager.open API
Medium
CVE-2023-45818
TinyMCE mXSS vulnerability in undo/redo, getContent API, resetContent API, and Autosave plugin
Medium
CVE-2023-44394
MantisBT may disclose project names to unauthorized users
High
CVE-2023-40180
Silverstripe GraphQL has DDOS Vulnerability due to lack of protection against recursive queries
Critical
CVE-2023-43661
Cachet vulnerable to Authenticated Remote Code Execution
High
CVE-2023-5591
SQL injection in librenms/librenms
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.