Medium
CVE-2023-2447
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Critical
CVE-2023-46357
Improper neutralization of SQL parameter in MyPrestaModules - Cross Selling in Modal Cart module for PrestaShop
Critical
CVE-2023-45377
Improper neutralization of SQL parameter in Chronopost - Chronopost Official module for PrestaShop
Medium
CVE-2023-48309
Possible user mocking that bypasses basic authentication
Medium
CVE-2023-48218
Bypass of field access control in strapi-plugin-protected-populate
High
CVE-2023-48293
Cross-Site Request Forgery with QueryOnXWiki allows arbitrary database queries
Critical
CVE-2023-48292
Run Shell Command allows Cross-Site Request Forgery
High
CVE-2023-48241
Whole content of all documents of all wikis exposed to anybody with view right on Solr suggest service
Critical
CVE-2023-48240
Cookies are sent to external images in rendered diff (and server side request forgery)
Medium
CVE-2023-48223
JWT Algorithm Confusion
Critical
CVE-2022-46337
Apache Derby: LDAP injection vulnerability in authenticator
Critical
CVE-2023-46302
Apache Software Foundation Apache Submarine has a bug when serializing against yaml. The bug is caused by snakeyaml https://nvd.nist.gov/vuln/detail/CVE-2022-1471 .
Medium
CVE-2023-47841
Analytify Dashboard <= 5.1.1 - Cross-Site Request Forgery
Medium
CVE-2023-47871
Contact Form to Any API <= 1.1.6 - Missing Authorization via delete_cf7_records()
Medium
CVE-2023-5776
Post Meta Data Manager <= 1.2.1 - Cross-Site Request Forgery to Post, Term, and User Meta Deletion
High
CVE-2023-47852
Link Whisper Free <= 0.6.5 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2023-47853
myCred <= 2.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-5469
Drop Shadow Boxes <= 1.7.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-47874
Perfmatters <= 2.1.6 - Missing Authorization
High
CVE-2023-47846
WP Githuber MD <= 1.16.2 - Authenticated (Author+) Arbitrary File Upload
High
CVE-2023-6091
Theme Editor <= 2.7.1 - Authenticated (Administrator+) Arbitrary File Upload
Medium
CVE-2023-47847
PayTR Taksit Tablosu <= 1.3.1 - Missing Authorization
Medium
CVE-2023-47843
CataBlog <= 1.7.0 - Authenticated (Editor+) Arbitrary File Deletion
Medium
CVE-2023-6203
The Events Calendar <= 6.2.8 - Information Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.