Medium
CVE-2023-47829
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2023-47807
10WebAnalytics <= 1.2.12 - Missing Authorization via gawd_wd_bp_install_notice_status
Medium
CVE-2023-6077
Ultimate Responsive Image Slider <= 3.5.11 - Missing Authorization via AJAX action
Medium
CVE-2023-47834
Quiz And Survey Master <= 8.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2023-6187
Paid Memberships Pro <= 2.12.3 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2023-47818
LWS Hide Login <= 2.1.8 - Protection Mechanism Bypass
High
CVE-2023-4214
AppPresser <= 4.2.5 - Insecure Password Reset Mechanism
Medium
CVE-2023-47832
SearchIQ <= 4.4 - Missing Authorization via getSIQPluginSettings
Medium
CVE-2023-47823
FormCraft <= 1.2.7 - Missing Authorization via formcraft_nag_update
Medium
CVE-2023-39925
Community by PeepSo <= 6.1.6.0 - Cross-Site Request Forgery via delete
High
CVE-2023-45382
Improper Limitation of a Pathname to a Restricted Directory in Common-Services - SoNice Retour module for PrestaShop
Critical
CVE-2023-45387
Improper neutralization of SQL parameter in MyPrestaModules - Product Catalog (CSV, Excel, XML) Export PRO module for PrestaShop
Medium
ghsa-w98g-5fmx-wm4x
pocketmine/raklib reliable-ordered queue size is unlimited, allowing a session to hog server memory
Medium
CVE-2023-48219
TinyMCE vulnerable to mutation Cross-site Scripting via special characters in unescaped text nodes
High
CVE-2023-5720
Quarkus does not properly sanitize artifacts created from its use of the Gradle plugin, allowing certain build system information to remain
High
CVE-2023-5245
Zip slip in mleap
High
CVE-2023-48089
xxl-job-admin vulnerable to Remote Code Execution
Medium
CVE-2023-48088
xxl-job-admin vulnerable to Cross Site Scripting
Medium
CVE-2023-48087
xxl-job-admin vulnerable to Insecure Permissions
High
CVE-2023-47637
Pimcore SQL Injection in Admin Grid Filter API through Multiselect::getFilterConditionExt()
Medium
CVE-2023-47636
pimcore/admin-ui-classic-bundle Full Path Disclosure via re-export document
Unrated
drupal-contrib-2023-052
drupal/mollie - SA-CONTRIB-2023-052
High
CVE-2023-34062
In Reactor Netty HTTP Server a malicious user can send a request using a specially crafted URL that can lead to a directory traversal attack
Medium
CVE-2023-47809
Accordion <= 2.6 - Authenticated (Editor+) Stored Cross-Site Scripting via accordion settings
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.