Medium
CVE-2023-38492
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Critical
ghsa-8www-cffh-4q98
Anyone with a share link can RESET all website data in Umami
Critical
CVE-2023-37754
Code injection in PowerJob
Critical
CVE-2023-39020
Code injection in stanford-parser
Critical
CVE-2023-39010
Code injection in BoofCV
Critical
CVE-2023-39022
Code injection in oscore
Critical
CVE-2023-39021
Code injection in wix-embedded-mysql
Critical
CVE-2023-39015
Code injection in webmagic-core
Critical
CVE-2023-39013
Code injection in Duke
Critical
CVE-2023-38992
SQL injection in jeecg-boot
Low
CVE-2023-3990
Cross-site Scripting in Mingsoft MCMS
Critical
CVE-2023-33493
Unrestricted Upload of File with Dangerous Type in the Ajaxmanager File and Database explorer (ajaxmanager) module from RSI for PrestaShop
Medium
CVE-2023-38509
Obfuscated email addresses should not be sorted
High
ghsa-wxf3-4fvj-vqqx
Unsafe plugins can be installed via pack import by tenant admins
High
CVE-2023-38504
DoS vulnerability for apps with sockets enabled
Medium
CVE-2023-3667
Bit Assist <= 1.1.8 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
eaabaadf-7881-4c4f-8987-fbba8318a458
Meks Smart Social Widget <= 1.6 - Missing Authorization to notice dimissal
Medium
CVE-2023-36685
CartFlows Pro <= 1.11.12 - Cross-Site Request Forgery
Medium
CVE-2023-0958
Inisev Plugins (Various Versions) - Missing Authorization on handle_installation function
Medium
CVE-2023-3977
Inisev Plugins (Various Versions) - Cross-Site Request Forgery on handle_installation function
Medium
9d79ce22-33ef-4dfb-a842-591cd7cedc94
Web Accessibility By accessiBe <= 1.15 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-5798
Assistant <= 1.4.3 - Authenticated (Editor+) Server Side Request Forgery
Medium
CVE-2023-3604
Change WP Admin Login <= 1.1.3 - Protection Mechanism Failure to Login Page Disclosure
Medium
CVE-2023-36683
Schema Pro <= 2.7.8 - Authenticated(Contributor+) Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.