Medium
CVE-2023-48331
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Critical
CVE-2023-46349
Improper neutralization of SQL parameter in MyPrestaModules - Product Catalog (CSV, Excel) Export/Update module for PrestaShop
Critical
CVE-2023-48188
Improper neutralization of SQL parameter in Opart Devis for PrestaShop
High
CVE-2023-46355
Exposure of Private Personal Information to an Unauthorized Actor in Bl Modules - CSV Feeds PRO module for PrestaShop
High
CVE-2023-48701
Cross-site Scripting via uploaded assets
Medium
CVE-2023-47467
Directory Traversal in jeecg-boot
High
CVE-2023-47350
Cross Site Request Forgery in SwiftyEdit
High
CVE-2023-48705
Cross-site Scripting potential in custom links, job buttons, and computed fields
Medium
CVE-2023-47380
Cross-site Scripting in Admidio
Medium
CVE-2023-46673
Elasticsearch Improper Handling of Exceptional Conditions
Critical
CVE-2023-37924
Apache Software Foundation Apache Submarine has an SQL injection vulnerability when a user logs in. This issue can result in unauthorized login.
High
CVE-2021-37942
APM Java Agent Local Privilege Escalation issue
Low
CVE-2021-22143
Exposure of Sensitive Information in Elastic APM .NET Agent
High
CVE-2023-5504
BackWPup <= 4.0.1 - Authenticated (Administrator+) Directory Traversal
Medium
dbf54852-f3fe-4c9e-9348-44a73f9a8131
WooCommerce Parcel Pro <= 1.6.11 - Cross-Site Request Forgery
Medium
CVE-2023-48277
Super Progressive Web Apps <= 2.2.21 - Missing Authorization
Medium
c146f89c-5df3-4aaf-b880-0ce6016dfb6d
GS Team Members <= 2.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-48275
Multiple Plugins by Trustindex.io <= (Various Versions)- Authenticated (Editor+) Arbitrary File Upload
Medium
CVE-2023-48700
Clear Text Credentials Exposed via Onboarding Task
High
CVE-2023-48699
Eval Injection in fastbots
High
CVE-2023-48051
An issue in /upydev/keygen.py in upydev v0.4.3 allows attackers to decrypt sensitive information via weak encryption padding.
High
CVE-2023-2497
UserPro <= 5.1.0 - Cross-Site Request Forgery to PHP Object Injection
Medium
CVE-2023-48271
Maspik – Spam blacklist <= 0.10.3 - Bypass
Medium
CVE-2023-6008
UserPro <= 5.1.1 - Cross-Site Request Forgery via multiple functions
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.