High
CVE-2023-4197
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,563
Medium
CVE-2023-5606
ChatBot 4.8.6 - 4.9.6 - Authenticated (Administrator+) Stored Cross-Site Scripting in FAQ Builder
Medium
CVE-2023-5385
Funnelforms Free <= 3.4 - Missing Authorization to Arbitrary Post Duplication
Medium
CVE-2023-5383
Funnelforms Free <= 3.4 - Cross-Site Request Forgery to Arbitrary Post Duplication
Medium
CVE-2023-5387
Funnelforms Free <= 3.4 - Missing Authorization to Enable/Disable Dark Mode
Medium
CVE-2023-5416
Funnelforms Free <= 3.4 - Missing Authorization to Category Deletion
Medium
CVE-2023-5411
Funnelforms Free <= 3.4 - Missing Authorization to Post Modification
Medium
CVE-2023-5382
Funnelforms Free <= 3.4 - Cross-Site Request Forgery to Arbitrary Post Deletion
Medium
CVE-2023-5415
Funnelforms Free <= 3.4 - Missing Authorization to New Category Creation
Medium
CVE-2023-5419
Funnelforms Free <= 3.4 - Missing Authorization to Test Email Sending
Medium
413d3ec0-8d04-4bef-9394-f666cfed733e
UsersWP <= 1.2.3.22 - Cross-Site Request Forgery
Medium
CVE-2023-5386
Funnelforms Free <= 3.4 - Missing Authorization to Arbitrary Post Deletion
High
CVE-2023-5822
Drag and Drop Multiple File Upload - Contact Form 7 <= 1.3.7.3 - Unauthenticated Arbitrary File Upload
Medium
CVE-2023-5417
Funnelforms Free <= 3.4 - Missing Authorization to Category Update
High
CVE-2023-5860
Icons Font Loader <= 1.1.2 - Authenticated (Administrator+) Arbitrary File Upload
Medium
CVE-2023-5844
pimcore/admin-ui-classic-bundle Unverified Password Change
Medium
CVE-2023-43796
Synapse vulnerable to leak of remote user device information
Medium
CVE-2023-5873
Pimcore Cross-site Scripting vulnerability
High
CVE-2015-20110
generator-jhipster allows a timing attack against validateToken due to a string comparison that stops at the first character
High
CVE-2023-5865
Insufficient Session Expiration in thorsten/phpmyfaq
High
CVE-2023-5864
phpMyFAQ Cross-site Scripting vulnerability
Medium
CVE-2023-5866
Sensitive cookie in HTTPS session without 'Secure' attribute in thorsten/phpmyfaq
Medium
CVE-2023-5867
Cross-site Scripting (XSS) in thorsten/phpmyfaq
Medium
CVE-2023-5861
Cross-site Scripting (XSS) in microweber/microweber
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.