Medium
CVE-2023-7195
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2023-7088
Add SVG Support for Media Uploader | inventivo <= 1.0.5 - Authenticated (Author+) Stored Cross-Site Scripting via SVG
Medium
CVE-2024-0665
WP Customer Area <= 8.2.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-0249
Advanced Schedule Posts <= 2.1.8 - Reflected Cross-Site Scripting
Medium
CVE-2023-7196
Ultimate Noindex Nofollow Tool <= 1.1.2 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2023-7231
illi Link Party! <= 1.0 - Missing Authorization to Unauthenticated Arbitrary Link Deletion
Medium
CVE-2023-5932
Travelpayouts <= 1.1.13 - Reflected Cross-Site Scripting
Medium
CVE-2023-7174
aBitGone CommentSafe <= 1.0.0 - Cross-Site Request Forgery to Settings Update and Cross-Site Request Forgery
High
CVE-2024-22233
Spring Framework server Web DoS Vulnerability
Critical
CVE-2017-20189
Clojure classes can be used to craft a serialized object that runs arbitrary code on deserialization
Critical
CVE-2024-23752
Code execution in pandasai
Critical
CVE-2024-23751
LlamaIndex (aka llama_index) through 0.9.34 allows SQL injection via the Text-to-SQL feature in NLSQLTableQueryEngine, SQLTableRetrieverQueryEngine, NLSQLRetriever, RetrieverQueryEngine, and PGVectorS
High
CVE-2024-23750
MetaGPT through 0.6.4 allows the QaEngineer role to execute arbitrary code because RunCode.run_script() passes shell metacharacters to subprocess.Popen.
Medium
CVE-2023-6953
PDF Generator For Fluent Forms <= 1.1.7 - Cross-Site Scripting
Medium
CVE-2024-0703
Sticky Buttons <= 3.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-0612
Content Views <= 3.6.2 - Authenticated(Administrator+) Stored Cross-Site Scripting via settings
Medium
CVE-2024-0587
Accelerated Mobile Pages <= 1.0.92.1 - Reflected Cross-Site Scripting
Medium
CVE-2023-6591
Popup Box Business (7.0.0 - 7.9.0) and Developer (20.0.0 - 20.9.0) - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2024-0761
File Manager <= 7.2.1 - Sensitive Information Exposure via Backup Filenames
Critical
CVE-2024-23730
Unsafe yaml deserialization in llama-hub
Medium
CVE-2024-23732
The JSON loader in Embedchain before 0.1.57 allows a ReDoS (regular expression denial of service) via a long string to json.py.
Critical
CVE-2024-23731
The OpenAPI loader in Embedchain before 0.1.57 allows attackers to execute arbitrary code, related to the openapi.py yaml.load function argument.
Medium
CVE-2024-23725
Cross-site Scripting in Ghost
Medium
CVE-2023-6843
easy.jobs <= 2.4.6 - Missing Authorization to Settings Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.