Unrated
drupal-contrib-2023-030
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2023-37280
Pimcore admin UI vulnerable to Cross-site Scripting in 2 factor authentication setup page
Critical
CVE-2023-37582
RocketMQ NameServer component Code Injection vulnerability
High
CVE-2023-35908
Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows unauthorized read access to a DAG through the URL. It is recommended to upgrade to a version that is not affected
Medium
CVE-2023-37579
Apache Pulsar Function Worker Incorrect Authorization vulnerability
Medium
CVE-2023-31007
Apache Pulsar Broker Improper Authentication vulnerability
Critical
CVE-2023-30429
Apache Pulsar Incorrect Authorization vulnerability
High
CVE-2023-30428
Apache Pulsar Broker's Rest Producer vulnerable to Incorrect Authorization
High
CVE-2023-22888
Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an attacker to cause a service disruption by manipulating the run_id parameter. This vulnerability is considered low s
High
CVE-2023-36543
Apache Airflow, versions before 2.6.3, has a vulnerability where an authenticated user can use crafted input to make the current request hang. It is recommended to upgrade to a version that is not aff
High
CVE-2023-22887
Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an attacker to perform unauthorized file access outside the intended directory structure by manipulating the run_id pa
High
CVE-2022-46651
Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an unauthorized actor to gain access to sensitive information in Connection edit view. This vulnerability is considere
High
CVE-2022-45855
Apache Ambari Expression Language Injection vulnerability
High
CVE-2022-42009
Apache Ambari Expression Language Injection vulnerability
High
CVE-2023-32200
Apache Jena Expression Language Injection vulnerability
High
CVE-2023-37967
DirectoryPress <= 3.6.2 - Missing Authorization
Medium
CVE-2023-37974
WP-FB-AutoConnect <= 4.6.1 - Cross-Site Request Forgery via jfb_admin_page
High
CVE-2023-3136
MailArchiver <= 2.10.1 - Unauthenticated Stored Cross-Site Scripting via Email Subject
High
CVE-2023-37976
Radio Forge Muses Player with Skins <= 2.5 - Reflected Cross-Site Scripting
Medium
CVE-2023-37968
Falang multilanguage <= 1.3.39 - Cross-Site Request Forgery via add_language
Medium
CVE-2023-37894
Variation Images Gallery for WooCommerce <= 2.3.3 - Reflected Cross-Site Scripting via style
High
CVE-2023-24410
FluentForm <= 4.3.25 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-37970
MF Gig Calendar <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via event_title and event_time
Medium
CVE-2023-37972
WooCommerce Product Stock Alert <= 2.0.1 - Information Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.