Medium
CVE-2023-50849
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2023-6855
Paid Memberships Pro <= 2.12.5 - Missing Authorization via API
Medium
CVE-2023-6941
Keap Official Opt-in Forms <= 1.0.11 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-50836
HTML Forms <= 1.3.28 - Authenticated (Administrator+) Cross-Site Scripting
Medium
CVE-2023-6924
Photo Gallery by 10Web <= 1.8.18 - Authenticated (Administrator+) Stored Cross-Site Scripting via Widget
Medium
CVE-2023-6991
JSM file_get_contents() Shortcode <= 2.7.0 - Authenticated (Contributor+) Server-Side Request Forgery via Shortcode
Medium
CVE-2023-4925
Easy Forms for Mailchimp <= 6.8.10 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-50843
Clockwork SMS Notfications <= 3.0.4 - Authenticated(Administrator+) SQL Injection
Medium
CVE-2023-46131
Grails data binding causes JVM crash and/or other denial of service
High
CVE-2023-7018
Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36.
Unrated
drupal-contrib-2023-055
drupal/dvf - SA-CONTRIB-2023-055
High
CVE-2023-37544
Apache Pulsar WebSocket Proxy contains an Improper Authentication vulnerability
High
CVE-2023-6976
MLflow Path Traversal Vulnerability
High
CVE-2023-6977
MLflow Local File Disclosure Vulnerability
Critical
CVE-2023-6974
MLflow Server-Side Request Forgery (SSRF)
Critical
CVE-2023-6975
MLFlow Path Traversal Vulnerability
High
CVE-2023-6909
Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2.
Medium
CVE-2023-6934
Limit Login Attempts Reloaded <= 2.25.26 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
ghsa-9wgg-m99q-hhfc
Expired tokens can be renewed without validating the account password
High
CVE-2023-50732
Velocity execution without script right through tree macro
High
CVE-2023-6730
Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36.
Critical
CVE-2019-25158
Pedroetb TTS-API OS Command Injection
Medium
CVE-2023-46104
Apache Superset uncontrolled resource consumption
High
CVE-2023-49734
Apache Superset incorrect write permissions vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.