Critical
CVE-2023-4994
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
High
CVE-2023-54390
PocketMine-MP server crash with certain invalid JSON payloads in `LoginPacket` due to dependency vulnerability (again)
High
CVE-2023-54355
PocketMine-MP server crash due to incorrect EC curve used for LoginPacket identityPublicKey
Medium
CVE-2023-40167
Jetty accepts "+" prefixed value in Content-Length
Low
CVE-2023-36479
Jetty vulnerable to errant command quoting in CGI Servlet
High
CVE-2023-1108
Undertow denial of service vulnerability
Medium
CVE-2023-42503
Apache Commons Compress denial of service vulnerability
High
CVE-2023-43610
Welcart e-Commerce <= 2.8.21 - Authenticated(Editor+) SQL Injection
Medium
9f23bf62-6008-4a9c-a7ae-a2e513699684
ShortPixel Image Optimizer <= 5.4.1 - Authenticated(Editor+) PHP Object Injection
High
CVE-2023-41955
Essential Addons for Elementor <= 5.8.8 - Authenticated (Contributor+) Privilege Escalation
Medium
CVE-2023-4963
WS Facebook Like Box Widget <= 5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-4643
Enable Media Replace <= 4.1.2 - Authenticated(Author+) PHP Object Injection
High
CVE-2023-43493
Welcart e-Commerce <= 2.8.21 - Authenticated(level_5+) SQL Injection via get_logs
Medium
CVE-2023-4800
DoLogin Security <= 3.7 - Missing Authorization on Dashboard Widget
High
CVE-2023-38507
Strapi Improper Rate Limiting vulnerability
Medium
CVE-2023-37263
Strapi's field level permissions not being respected in relationship title
Medium
CVE-2023-36472
Strapi may leak sensitive user information, user reset password, tokens via content-manager views
Unrated
drupal-contrib-2023-045
drupal/mail_login - SA-CONTRIB-2023-045
Critical
CVE-2023-41892
Craft CMS Remote Code Execution vulnerability
Medium
CVE-2023-4648
WP Customer Reviews <= 3.6.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-4948
WooCommerce CVR Payment Gateway < 6.1.0 - Missing Authorization to Authenticated (Contributor+) CVR Update
Medium
e34b6ae5-1370-4058-95dd-5686978ca45b
PageLayer <= 1.7.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2023-4386
Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via queries
Medium
CVE-2023-4820
PowerPress <= 11.0.11 - Authenticated(Contributor+) Stored Cross-Site Scripting via Media URL
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.