High
CVE-2023-50249
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 5,032
Reset filters
High
CVE-2023-50728
Unauthenticated Denial of Service in the octokit/webhooks library
Medium
CVE-2023-50710
Named path parameters can be overridden in TrieRouter
Medium
CVE-2023-50709
Cube API denial of service attack
Critical
CVE-2023-49583
Escalation of privileges in @sap/xssec
Medium
CVE-2023-49804
Password Change Vulnerability
High
CVE-2023-49799
SSRF & Credentials Leak
High
CVE-2023-49800
DOS by abusing `fetchOptions.retry`.
Medium
CVE-2023-46497
Directory Traversal in evershop
Critical
CVE-2023-46498
Code execution in evershop
Medium
CVE-2023-46499
Cross-site Scripting in evershop
High
CVE-2023-46496
Directory Traversal in evershop
Medium
CVE-2023-46495
Cross-site Scripting in evershop
Medium
CVE-2023-46494
Cross Site Scripting in evershop
Medium
CVE-2023-46493
Directory Traversal in evershop
High
CVE-2023-26158
mockjs vulnerable to Prototype Pollution via the Util.extend function
Medium
CVE-2023-49293
Vite XSS vulnerability in `server.transformIndexHtml` via URL payload
Medium
CVE-2023-44402
ASAR Integrity bypass via filetype confusion in electron
Low
CVE-2023-48711
google-translate-api-browser Server-Side Request Forgery (SSRF) Vulnerability
Medium
ghsa-hfxh-rjv7-2369
Uptime Kuma Authenticated remote code execution via TailscalePing
Medium
CVE-2023-49276
Attribute Injection leading to XSS(Cross-Site-Scripting)
Critical
CVE-2023-49210
openssl npm package vulnerable to command execution
Medium
CVE-2023-48309
Possible user mocking that bypasses basic authentication
Medium
CVE-2023-48223
JWT Algorithm Confusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.