High
CVE-2022-25883
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-32291
MonsterInsights Pro <= 8.14.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-35913
OOPSpam Anti-Spam <= 1.1.44 - Cross-Site Request Forgery via empty_ham_entries and empty_spam_entries
Medium
CVE-2023-2701
Gravity Forms <= 2.7.4 - Reflected Cross-Site Scripting
High
CVE-2023-35166
XWiki Platform vulnerable to privilege escalation (PR) from account through TipsPanel
Medium
CVE-2023-35167
When setting EntityOptions.apiPrefilter to a function, the filter is not applied to API requests for a resource by Id
Critical
CVE-2023-35162
XWiki Platform vulnerable to cross-site scripting via xcontinue parameter in previewactions template
High
CVE-2023-35155
XWiki Platform vulnerable to cross-site scripting in target parameter via share page by email
Critical
CVE-2023-35153
XWiki Platform vulnerable to stored cross-site scripting in ClassEditSheet page via name parameters
Critical
CVE-2023-35152
XWiki Platform vulnerable to privilege escalation (PR) from account through like LiveTableResults
High
CVE-2023-35151
XWiki Platform may show email addresses in clear in REST results
Critical
CVE-2023-35150
XWiki Platform vulnerable to privilege escalation (PR) from view right via Invitation application
High
CVE-2023-34467
XWiki Platform may retrieve email addresses of all users
Medium
CVE-2023-34466
XWiki Platform's tags on non-viewable pages can be revealed to users
Critical
CVE-2023-34465
XWiki Platform's Mail.MailConfig can be edited by any user with edit rights
Critical
CVE-2023-34464
XWiki vulnerable to stored cross-site scripting via any wiki document and the displaycontent/rendercontent template
Medium
CVE-2023-34462
netty-handler SniHandler 16MB allocation
Critical
CVE-2023-34541
Langchain 0.0.171 is vulnerable to Arbitrary code execution in load_prompt.
Medium
CVE-2020-21485
Alluxio Cross Site Scripting vulnerability
Critical
CVE-2020-21489
Liufee CMS File Upload vulnerability
Medium
CVE-2023-33495
Craft CMS vulnerable to HTML injection
Medium
CVE-2020-21246
YiiCMS Cross Site Scripting vulnerability
Critical
CVE-2020-21174
liufee CMS File Upload vulnerability
High
CVE-2020-20726
GilaCMS Cross Site Request Forgery vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.