Medium
CVE-2023-40814
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2023-40812
Cross-site Scripting in OpenCRX
Medium
CVE-2023-40809
Cross-site Scripting in OpenCRX
Medium
CVE-2023-40810
Cross-site Scripting in OpenCRX
Medium
CVE-2023-48300
Embed Privacy <= 1.8.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2023-48238
json-web-token library is vulnerable to a JWT algorithm confusion attack
Medium
CVE-2023-48294
LibreNMS has Broken Access control on Graphs Feature
Medium
CVE-2023-48295
LibreNMS Cross-site Scripting at Device groups Deletion feature
Medium
ghsa-wm63-7627-ch33
@vendure/core's insecure currencyCode handling allows wrong payment amounts
Critical
ghsa-x563-6hqv-26mr
Ibis PyArrow dependency allows arbitrary code execution when loading a malicious data file
Medium
CVE-2023-46745
LibreNMS vulnerable to rate limiting bypass on login page
Critical
CVE-2023-47248
PyArrow: Arbitrary code execution when loading a malicious data file
Critical
CVE-2023-47797
Liferay Portal XSS with `p_l_back_url_title` on edit content page
Medium
CVE-2023-48648
Concrete CMS allows unauthorized access because directories can be created with insecure permissions
Low
CVE-2023-48649
Concrete CMS Cross-site Scripting vulnerability
Medium
CVE-2023-40314
OpenNMS Cross-site Scripting vulnerability
Medium
CVE-2023-51691
wpDiscuz <= 7.6.12 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-6197
Audio Merchant <= 5.0.4 - Cross-Site Request Forgery to Settings Modifcation and Stored Cross-Site Scripting
Medium
CVE-2023-5749
EmbedPress <= 3.9.1 - Reflected Cross-Site Scripting
Medium
CVE-2023-5750
EmbedPress <= 3.9.1 - Reflected Cross-Site Scripting
High
CVE-2023-6196
Audio Merchant <= 5.0.4 - Cross-Site Request Forgery to Arbitrary File Upload
Critical
CVE-2023-6014
MLflow authentication requirement bypass can allow a user to arbitrarily create an account
High
CVE-2023-48222
Authenticated Rundeck users can view or delete jobs they do not have authorization for.
Medium
CVE-2023-47112
Authenticated users can view job names and groups they do not have authorization to view
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.