Medium
CVE-2023-0309
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,071
Reset filters
Medium
CVE-2023-0298
Improper Authorization in grumpydictator/firefly-iii
Medium
ghsa-m95x-m25c-w9mp
XML-RPC for PHP allows access to local files via malicious argument to the Client::send method
Medium
ghsa-7vcx-v65q-9wpg
XML-RPC for PHP's `Wrapper::buildClientWrapperCode` method allows code injection via malicious `$client` argument
Medium
ghsa-pxqj-xrv5-qvjf
XML-RPC for PHP's debugger vulnerable to possible XSS attack
Unrated
drupal-contrib-2023-001
drupal/private_taxonomy - SA-CONTRIB-2023-001
Low
CVE-2023-22489
Any Flarum user including unactivated can reply in public discussions whose first post was permanently deleted
Medium
CVE-2023-22488
Flarum notifications can leak restricted content
High
CVE-2023-22487
Flarum post mentions can be used to read any post on the forum without access control
Medium
CVE-2023-54395
PocketMine-MP vulnerable to denial-of-service by sending large modal form responses
High
CVE-2023-54396
PocketMine-MP has improperly handled dye colour IDs in banner NBT, leading to server crash
Medium
CVE-2010-10004
Information Cards Module vulnerable to Cross-site Scripting
Medium
CVE-2016-15015
Barzahlen Payment Module PHP SDK vulnerable to Observable Timing Discrepancy
Critical
CVE-2021-4308
WebPA SQL Injection vulnerability
Medium
CVE-2015-10030
SUKOHI Surpass Path Traversal vulnerability
Critical
CVE-2014-125029
PaginationServiceProvider SQL Injection vulnerability
Medium
CVE-2017-20164
Symbiote Seed Open Redirect vulnerability
Critical
CVE-2015-10029
kelvinmo simplexrd vulnerable to Improper Restriction of XML External Entity Reference
Critical
CVE-2014-125051
himiklab yii2-jqgrid-widget vulnerable to SQL Injection
Critical
CVE-2015-10018
DBRisinajumi d2files SQL Injection vulnerability
Medium
CVE-2021-4303
Xataface vulnerable to Cross-site Scripting
Medium
CVE-2019-25094
typo3-appointments vulnerable to Cross-site Scripting
High
CVE-2015-10012
FrameworkUserBundle Generates Error Message Containing Sensitive Information
Critical
CVE-2015-10009
nterchange Code Injection vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.