High
CVE-2023-39508
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Critical
CVE-2023-36095
An issue in Harrison Chase langchain v.0.0.194 allows an attacker to execute arbitrary code via the python exec calls in the PALChain, affected functions include from_math_prompt and from_colored_obje
Medium
CVE-2022-41401
OpenRefine Server-Side Request Forgery vulnerability
Medium
CVE-2023-4157
omeka/omeka-s Improper Input Validation vulnerability
Critical
CVE-2023-38699
MindsDB can be made to not verify SSL certificates
Medium
CVE-2023-38690
matrix-appservice-irc IRC command injection via admin commands containing newlines
Medium
CVE-2023-38691
matrix-appservice-bridge doesn't verify the sub parameter of an openId token exhange, allowing unauthorized access to provisioning APIs
Low
CVE-2023-38700
matrix-appservice-irc events can be crafted to leak parts of targeted messages from other bridged rooms
Critical
CVE-2023-38686
Sydent does not verify email server certificates
Critical
CVE-2023-29689
PyroCMS remote code execution vulnerability
Medium
CVE-2023-3356
Subscribers Text Counter <= 1.7 - Cross-Site Request Forgery to Settings Update and Cross-Site Scripting
Medium
CVE-2022-1601
User Access Manager <= 2.2.16 - IP Spoofing
Critical
CVE-2023-36480
Aerospike Java Client vulnerable to unsafe deserialization of server responses
Critical
ghsa-g6w6-h933-4rc5
Soketi was exposed to Sandbox Escape vulnerability via vm2
Medium
CVE-2023-39343
Sulu Observable Response Discrepancy on Admin Login
High
CVE-2023-37920
Removal of e-Tugra root certificate
High
CVE-2023-4136
Cross-site Scripting (XSS) in CrafterCMS
Medium
CVE-2023-3348
Cloudflare Wrangler directory traversal vulnerability
Medium
CVE-2023-38708
Pimcore Path Traversal Vulnerability in AssetController:importServerFilesAction
Medium
CVE-2023-4145
pimcore/customer-management-framework-bundle Cross-site Scripting vulnerability in Segment name
Medium
CVE-2023-40068
Advanced Custom Fields 6.1 - 6.1.7 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-4142
WP Ultimate CSV Importer <= 7.9.8 - Authenticated (Author+) Remote Code Execution
High
CVE-2023-4141
WP Ultimate CSV Importer <= 7.9.8 - Authenticated (Author+) PHP File Creation to Remote Code Execution
Medium
a8c8d839-d2a4-4b2a-ad61-a3cda7826636
Duplicate Post <= 1.4.1 - Cross-Site Request Forgery via 'cdp_action_handling' AJAX action
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.