Medium
CVE-2023-48313
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Low
CVE-2023-48227
Backoffice User can bypass "Publish" restriction
Low
CVE-2023-38694
Possible injection of HTML into user invite mails
Medium
CVE-2023-6379
Alkacon OpenCMS XSS via Mercury template
High
CVE-2023-6753
Path Traversal in GitHub repository mlflow/mlflow prior to 2.9.2.
Medium
CVE-2023-50375
Google Language Translator <= 6.0.19 - Missing Authorization via admin notifications
Medium
CVE-2023-6383
Debug Log Manager <= 2.2.2 - Directory Listing to Sensitive Information Disclosure
Medium
CVE-2023-6161
WP Crowdfunding <= 2.1.8 - Reflected Cross-Site Scripting
High
CVE-2023-6826
E2Pdf <= 1.20.25 - Authenticated (Administrator+) Arbitrary File Upload
Low
CVE-2023-50263
Unauthenticated db-file-storage views
Critical
CVE-2023-43364
Searchor CLI's Search vulnerable to Arbitrary Code using Eval
High
CVE-2023-6709
Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository mlflow/mlflow prior to 2.9.2.
Critical
CVE-2023-49583
Escalation of privileges in @sap/xssec
Critical
CVE-2023-50423
Improper Privilege Management in sap-xssec
Medium
CVE-2023-49804
Password Change Vulnerability
High
CVE-2023-49799
SSRF & Credentials Leak
Medium
CVE-2023-49798
OpenZeppelin Contracts and Contracts Upgradeable duplicated execution of subcalls in v4.9.4
High
CVE-2023-6636
Greenshift – animation and page builder blocks <= 7.6.2 - Authenticated (Administrator+) Arbitrary File Upload
Medium
CVE-2023-6637
CAOS | Host Google Analytics Locally <= 4.7.14 - Missing Authorization to Unauthenticated Plugin Settings Update
High
CVE-2023-6558
Export and Import Users and Customers <= 2.4.8 - Authenticated (Shop Manager+) Arbitrary File Upload
Critical
CVE-2023-40921
Improper neutralization of a SQL parameter in deprecated soliberte module from Common Services for PrestaShop
Critical
CVE-2023-46989
Improper neutralization of SQL parameter in Innovadeluxe - Quick Order module for PrestaShop
Low
ghsa-w4x6-hh3x-wjrx
Stale copy of the public suffix list
High
CVE-2023-49803
Overly permissive origin policy
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.