Medium
CVE-2023-26154
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,120
Reset filters
Medium
CVE-2023-49289
Ajax Pro Cross-site Scripting
Low
CVE-2021-22143
Exposure of Sensitive Information in Elastic APM .NET Agent
Medium
CVE-2023-48219
TinyMCE vulnerable to mutation Cross-site Scripting via special characters in unescaped text nodes
High
CVE-2023-36049
Microsoft Security Advisory CVE-2023-36049: .NET Elevation of Privilege Vulnerability
Medium
CVE-2023-36558
Microsoft Security Advisory CVE-2023-36558: .NET Security Feature Bypass Vulnerability
Medium
CVE-2023-45819
TinyMCE XSS vulnerability in notificationManager.open API
Medium
CVE-2023-45818
TinyMCE mXSS vulnerability in undo/redo, getContent API, resetContent API, and Autosave plugin
Medium
CVE-2023-45814
Bunkum tokens cached in the AuthenticationService are susceptible to a use-after-free
High
CVE-2023-36435
MsQuic Remote Denial of Service Vulnerability
High
CVE-2023-38171
Remote Denial of Service Vulnerability in Microsoft.Native.Quic.MsQuic.Schannel
Medium
CVE-2023-36566
Microsoft Common Data Model SDK Denial of Service Vulnerability
High
CVE-2023-36414
Azure Identity SDK Remote Code Execution Vulnerability
High
ghsa-wqcr-xm43-hpqr
Vulnerable version of libwebp and can be exploited with a malicious source image
High
ghsa-4c29-gfrp-g6x9
CefSharp affected by libvpx's heap buffer overflow in vp8 encoding
Medium
CVE-2023-44390
HtmlSanitizer vulnerable to Cross-site Scripting in Foreign Content
High
ghsa-7vpr-3ppw-qrpj
Imageflow affected by libwebp zero-day and should not be used with malicious source images.
Critical
ghsa-j646-gj5p-p45g
CefSharp affected by heap buffer overflow in WebP
High
CVE-2023-41890
Sustainsys.Saml2 Insufficient Identity Provider Issuer Validation
High
CVE-2023-36792
Microsoft Security Advisory CVE-2023-36792: .NET Remote Code Execution Vulnerability
High
CVE-2023-36794
Microsoft Security Advisory CVE-2023-36794: .NET Remote Code Execution Vulnerability
High
CVE-2023-36793
Microsoft Security Advisory CVE-2023-36793: .NET Remote Code Execution Vulnerability
High
CVE-2023-36796
Microsoft Security Advisory CVE-2023-36796: .NET Remote Code Execution Vulnerability
Medium
CVE-2023-36799
Microsoft Security Advisory CVE-2023-36799: .NET Denial of Service Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.