Medium
CVE-2022-24093
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2023-4950
Funnelforms Free <= 3.3.9 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-5054
Super Store Finder <= 6.9.3 - Unauthenticated Email Creation/Sending
Medium
CVE-2023-50886
Legal Pages <= 1.3.7 - Missing Authorization on 'deleteLegalTemplate'
High
9dd1e52c-83b7-4b3e-a791-a2c0ccd856bc
wpDiscuz <= 7.6.5 - Unauthenticated SQL Injection
Medium
CVE-2023-51371
Bit Assist <= 1.1.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-4961
Poptin <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
35027df9-ae55-453f-bb42-4b2664d66293
Statify – Extended Evaluation <= 2.6.3 - Authenticated (Admin+) CSV Injection
Medium
CVE-2023-4975
Website Builder by SeedProd <= 6.15.13.1 - Cross-Site Request Forgery to Settings Update
Medium
1a2fb050-1a7c-45cc-86c7-02331d47f780
WPSchoolPress <= 2.2.4 - Cross-Site Request Forgery
Unrated
808
LazyDbBackup - Other
High
CVE-2023-42439
GeoNode vulnerable to SSRF Bypass to return internal host data
High
ghsa-22rr-f3p8-5gf8
Directus affected by VM2 sandbox escape vulnerability
Low
CVE-2023-41900
Jetty's OpenId Revoked authentication allows one request
Medium
CVE-2023-4977
LibreNMS Code Injection vulnerability
Medium
CVE-2023-4981
LibreNMS Cross-site Scripting vulnerability
Medium
CVE-2023-4982
LibreNMS Cross-site Scripting vulnerability
Medium
CVE-2023-4980
LibreNMS Cross-site Scripting vulnerability
Medium
CVE-2023-4978
LibreNMS Cross-site Scripting vulnerability
Medium
CVE-2023-4979
LibreNMS Cross-site Scripting vulnerability
Medium
CVE-2023-41592
Froala Editor Cross-site Scripting vulnerability
High
CVE-2023-3025
Dropbox Folder Share <= 1.9.7 - Unauthenticated Server-Side Request Forgery via 'link'
Medium
CVE-2023-5001
Horizontal scrolling announcement <= 9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-4999
Horizontal scrolling announcement <= 9.2 - Authenticated (Subscriber+) SQL Injection via Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.