High
CVE-2023-3552
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Critical
CVE-2023-3551
TeamPass Code Injection vulnerability
Low
CVE-2023-37269
Winter CMS stored XSS through privileged upload of SVG file
High
CVE-2018-1000888
Archive_Tar contains Potential RCE if filename starts with phar://
Medium
CVE-2023-33008
Apache Johnzon Deserialization of Untrusted Data vulnerability
Medium
CVE-2023-25042
oAuth Twitter Feed for Developers <= 2.3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-24412
Image Social Feed Plugin <= 1.7.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-35909
Ninja Forms <= 3.6.25 - Denial of Service via Large Form Submissions
Medium
CVE-2023-25477
Video Gallery <= 1.3.12 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
747afa58-182a-4fb3-bfe3-f15db0b1d85a
WP SMS <= 6.1.5 - Cross-Site Request Forgery
Critical
CVE-2023-37999
HT Mega – Absolute Addons for Elementor <= 2.2.0 - Missing Authorization to Privilege Escalation
Medium
CVE-2023-25044
Social Share Boost <= 4.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2023-3525
Getnet Argentina para Woocommerce 0.0.1 - 0.0.4 - Authorization Bypass via webhook
Medium
CVE-2023-37391
WordPress Mobile Pack <= 3.4.1 - Cross-Site Request Forgery
Critical
15f3a6e1-6126-4825-b2b1-e40dc5694f43
Atarim - Client Interface <= 3.9.1 - Missing Authorization via AJAX actions
Medium
0007d830-2e68-4c2f-8fac-f4363bc2d73d
Gift Cards (Gift Vouchers and Packages) <= 4.3.5 - Cross-Site Request Forgery in new_voucher_template.php
Unrated
790
Plugin Creative Gallery - SQL Injection
Unrated
792
Virtual Classroom - SQL Injection
Unrated
794
LM-CUSTOM-ADMIN - Other
Medium
CVE-2023-36829
Sentry CORS misconfiguration
Critical
CVE-2023-29824
** DISPUTED ** A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior to 1.8.0. NOTE: the vendor and discoverer indicate that this is not a security issue.
High
CVE-2023-3531
TeamPass Cross-site Scripting vulnerability
High
CVE-2023-30601
Apache Cassandra: Privilege escalation when enabling FQL/Audit logs
Critical
Exploited in attacks
CVE-2023-33246
Apache RocketMQ may have remote code execution vulnerability when using update configuration function
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.