High
CVE-2023-34252
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 853
Reset filters
High
CVE-2023-32679
Craft CMS vulnerable to Remote Code Execution via unrestricted file extension
High
CVE-2023-32073
WWBN AVideo command injection vulnerability
High
CVE-2023-27159
Appwrite Server-Side Request Forgery vulnerability
Critical
CVE-2023-25655
baserCMS allows any file to be uploaded
Critical
CVE-2023-25654
baserCMS File Uploader Remote Code Execution (RCE) vulnerability
Critical
CVE-2023-28115
PHAR deserialization allowing remote code execution
High
CVE-2023-23923
Moodle Improper Access Control vulnerability
High
ghsa-g3j5-mpp2-2fqm
symfont/process typosquatting malware spoofs symfony/process
Medium
ghsa-m95x-m25c-w9mp
XML-RPC for PHP allows access to local files via malicious argument to the Client::send method
Medium
CVE-2022-40002
FeehiCMS Cross Site Scripting vulnerability
Medium
CVE-2022-39325
baserproject/basercms vulnerable to cross-site scripting (XSS) vulnerability
High
ghsa-3fgr-xjr6-xqm8
code injection in phpxmlrpc/phpxmlrpc
Medium
CVE-2022-43692
Concrete CMS vulnerable to Reflected Cross-site Scripting
Medium
CVE-2022-39315
Kirby CMS vulnerable to user enumeration in the brute force protection
Unrated
drupal-contrib-2022-058
drupal/twig_field_value - SA-CONTRIB-2022-058
Medium
CVE-2022-35174
Cross site scripting in getkirby/starterkit
Medium
CVE-2022-35943
CodeIgniter Shield Vulnerable to SameSite Attackers Bypassing the CSRF Protection
Medium
CVE-2022-35585
ForkCMS stored XSS via `start_date` parameter
Low
CVE-2022-35921
Byobu user preference to prevent private discussions being started are not respected
Medium
CVE-2022-31109
Diactoros before 2.11.1 vulnerable to HTTP Host Header Attack
Medium
CVE-2022-33155
Cross site scripting in ameos_tarteaucitron
High
CVE-2022-31140
Valinor error messages leading to potential data exfiltration before v0.12.0
Critical
CVE-2020-35129
Mautic stored Cross-site Scripting (XSS)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.