High
CVE-2023-5072
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
High
CVE-2023-47130
yiisoft/yii deserializing untrusted user input can lead to remote code execution
Medium
CVE-2019-25155
DOMPurify Open Redirect vulnerability
Medium
CVE-2023-5976
Microweber Improper Access Control vulnerability
High
CVE-2023-47631
vantage6-server node accepts non-whitelisted algorithms from malicious server
Medium
CVE-2023-47627
AIOHTTP has problems in HTTP parser (the python one, not llhttp)
Low
CVE-2023-47641
Aiohttp has inconsistent interpretation of `Content-Length` vs. `Transfer-Encoding` differing in C and Python fallbacks
High
CVE-2023-36049
Microsoft Security Advisory CVE-2023-36049: .NET Elevation of Privilege Vulnerability
Medium
CVE-2023-36558
Microsoft Security Advisory CVE-2023-36558: .NET Security Feature Bypass Vulnerability
Low
CVE-2023-47126
Information Disclosure in typo3/cms-install tool
Medium
CVE-2023-47125
Bypassing Cross-Site Scripting Protection in TYPO3 HTML Sanitizer
High
CVE-2023-47621
Guest Entries Remote code execution via file uploads
Medium
CVE-2023-46998
Bootbox.js Cross Site Scripting vulnerability
Medium
CVE-2023-47127
TYPO3 vulnerable to Weak Authentication in Session Handling
High
CVE-2023-46446
AsyncSSH Rogue Session Attack
Medium
CVE-2023-46445
AsyncSSH Rogue Extension Negotiation
Medium
CVE-2023-47789
WooCommerce Canada Post Shipping <= 2.8.3 - Cross-Site Request Forgery
Medium
CVE-2023-4889
Shareaholic <= 9.7.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-5953
Welcart e-Commerce <= 2.9.4 - Authenticated (Subscriber+) Arbitrary File Upload
High
f59004bb-b026-4137-a332-f46a09237e7b
Welcart e-Commerce <= 2.9.4 - Cross-Site Request Forgery
High
CVE-2023-47784
Slider Revolution <= 6.6.15 - Authenticated (Author+) Arbitrary File Upload
Medium
CVE-2023-5715
Website Optimization – Plerdy <= 1.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
db0508dd-143f-4674-8193-d46967d2799f
Legal Pages <= 1.3.8 - Missing Authorization
Medium
CVE-2023-40600
EWWW Image Optimizer <= 7.2.0 - Unauthenticated Sensitive Information Exposure via Debug Log
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.