Medium
CVE-2023-3372
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,591
Critical
CVE-2023-3197
MStore API <= 4.0.1 - Unauthenticated SQL Injection
High
CVE-2023-3186
Popup by Supsystic <= 1.10.18 - Prototype Pollution
Medium
041e635a-9f97-4f54-8ecb-57bbbc321cfc
ProfilePress <= 4.10.3 - Reflected Cross-Site Scripting via error message
Medium
CVE-2023-34110
Flask-AppBuilder vulnerable to possible disclosure of sensitive information on user error
Critical
CVE-2023-32571
Dynamic Linq vulnerable to remote code execution
High
CVE-2023-35133
Moodle vulnerable to Server Side Request Forgery
Medium
CVE-2023-35131
Moodle vulnerable to Cross-site Scripting
Medium
CVE-2023-35132
Moodle vulnerable to SQL Injection
Low
CVE-2023-35931
Shescape potential environment variable exposure on Windows with CMD
Medium
CVE-2023-25499
Vaadin vulnerable to possible information disclosure in non visible components.
Low
CVE-2023-25500
Vaadin vulnerable to possible information disclosure of class and method names in RPC response
Medium
CVE-2023-35925
FastAsyncWorldEdit vulnerable to Uncontrolled Resource Consumption
Critical
CVE-2023-35161
XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in DeleteApplication page
Critical
CVE-2023-35160
XWiki Platform vulnerable to reflected cross-site scripting via back and xcontinue parameters in resubmit template
Critical
CVE-2023-35159
XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in deletespace template
Critical
CVE-2023-35158
XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in restore template
High
CVE-2023-35157
XWiki Platform vulnerable to reflected cross-site scripting via delattachment action
Critical
CVE-2023-35156
XWiki Platform vulnerable to reflected cross-site scripting via xredirect parameter in delete template
High
CVE-2022-24839
org.nokogiri:nekohtml vulnerable to Uncontrolled Resource Consumption
Critical
CVE-2023-36097
fuadmin vulnerable to insecure file upload
Critical
CVE-2023-29931
laravel-s vulnerable to Local File Inclusion
Medium
CVE-2023-26115
word-wrap vulnerable to Regular Expression Denial of Service
Medium
CVE-2023-2561
Gallery Metabox <= 1.5 - Missing Authorization via gallery_remove
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.