Low
CVE-2023-2585
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2023-37302
MediaWiki Cross-site Scripting vulnerability
Medium
CVE-2023-34840
angular-ui-notification Cross-site Scripting vulnerability
Unrated
CVE-2023-37360
pacparser_find_proxy in Pacparser before 1.4.2 allows JavaScript injection, and possibly privilege escalation, when the attacker controls the URL (which may be realistic within enterprise security pro
Medium
CVE-2023-37299
Joplin Cross-site Scripting vulnerability
Medium
CVE-2023-37298
Joplin Cross-site Scripting vulnerability
High
CVE-2023-26135
flatnest Prototype Pollution vulnerability
Medium
CVE-2023-3469
phpMyFAQ Cross-site Scripting
High
CVE-2023-36677
SP Project & Document Manager <= 4.67 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2023-36691
WebwinkelKeur <= 3.24 - Cross-Site Request Forgery
Medium
CVE-2023-34377
My Content Management <= 1.7.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
9854d09a-2fab-46e6-9fc1-ff6d68df2662
Request a Quote <= 2.3.10 - Cross-Site Request Forgery
Medium
CVE-2023-36689
WPFactory Helper <= 1.5.2 - Reflected Cross-Site Scripting via item_slug
Medium
CVE-2023-23823
Enhanced Text Widget <= 1.5.8 - Missing Authorization
Medium
6309c706-f84a-4997-9a9b-1bd8cf8f711a
Knowledge Center <= 2.7 - Authenticated (Admin+) Cross-Site Scripting
Medium
CVE-2023-36530
SP Project & Document Manager <= 4.67 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
296f15eb-0782-4351-a2c5-c8ef6f005352
TrustProfile <= 3.24 - Cross-Site Request Forgery
High
CVE-2020-26708
requests-xml v0.2.3 was discovered to contain an XML External Entity Injection (XXE) vulnerability which allows attackers to execute arbitrary code via a crafted XML file.
High
CVE-2020-26710
easy-parse v0.1.1 was discovered to contain a XML External Entity Injection (XXE) vulnerability which allows attackers to execute arbitrary code via a crafted XML file.
High
CVE-2020-26709
py-xml v1.0 was discovered to contain an XML External Entity Injection (XXE) vulnerability which allows attackers to execute arbitrary code via a crafted XML file.
Low
ghsa-373w-rj84-pv6x
SafeURL-Python's hostname blocklist does not block FQDNs
Critical
CVE-2023-3249
Web3 – Crypto wallet Login & NFT token gating <= 2.6.0 - Authentication Bypass
High
CVE-2023-3063
SP Project & Document Manager <= 4.67 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary User Password Change
Critical
CVE-2023-3460
Ultimate Member <= 2.6.6 - Privilege Escalation via Arbitrary User Meta Updates
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.