High
CVE-2023-49799
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
Medium
CVE-2023-49798
OpenZeppelin Contracts and Contracts Upgradeable duplicated execution of subcalls in v4.9.4
High
CVE-2023-49803
Overly permissive origin policy
High
CVE-2023-49800
DOS by abusing `fetchOptions.retry`.
Medium
CVE-2023-46497
Directory Traversal in evershop
Critical
CVE-2023-46498
Code execution in evershop
Medium
CVE-2023-46499
Cross-site Scripting in evershop
High
CVE-2023-46496
Directory Traversal in evershop
Medium
CVE-2023-46495
Cross-site Scripting in evershop
Medium
CVE-2023-46494
Cross Site Scripting in evershop
Medium
CVE-2023-46493
Directory Traversal in evershop
High
CVE-2023-26158
mockjs vulnerable to Prototype Pollution via the Util.extend function
Medium
CVE-2023-47440
Directory Traversal in Gladys Assistant
Medium
CVE-2023-26154
pubnub Insufficient Entropy vulnerability
Medium
CVE-2023-49293
Vite XSS vulnerability in `server.transformIndexHtml` via URL payload
Medium
CVE-2023-6460
Logging of the firestore key within nodejs-firestore
Medium
CVE-2023-44402
ASAR Integrity bypass via filetype confusion in electron
Medium
CVE-2023-48631
@adobe/css-tools Improper Input Validation and Inefficient Regular Expression Complexity
Low
CVE-2023-48711
google-translate-api-browser Server-Side Request Forgery (SSRF) Vulnerability
Medium
ghsa-hfxh-rjv7-2369
Uptime Kuma Authenticated remote code execution via TailscalePing
High
CVE-2023-6293
sequelize-typescript Prototype Pollution vulnerability
Medium
CVE-2023-49276
Attribute Injection leading to XSS(Cross-Site-Scripting)
Critical
CVE-2023-49210
openssl npm package vulnerable to command execution
Medium
CVE-2023-48309
Possible user mocking that bypasses basic authentication
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.