Medium
CVE-2023-33208
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Critical
CVE-2023-2704
BP Social Connect <= 1.5 - Authentication Bypass
Critical
CVE-2023-2780
Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.3.1.
Medium
CVE-2023-26044
ReactPHP's HTTP server continues parsing unused multipart parts after reaching input field and file upload limits
High
CVE-2023-2756
pimcore/customer-management-framework-bundle has SQL Injection vulnerability in Segment Assignment query
Medium
CVE-2023-2752
phpMyFAQ vulnerable to stored Cross-site Scripting
Medium
CVE-2023-2753
phpMyFAQ vulnerable to stored Cross-site Scripting
Medium
CVE-2023-32313
vm2 vulnerable to Inspect Manipulation
Medium
CVE-2023-2261
WP Activity Log <= 4.5.0 - Missing Capabilities Check to User Enumeration
Medium
CVE-2023-2286
WP Activity Log <= 4.5.0 - Cross-Site Request Forgery via ajax_run_cleanup
Critical
CVE-2023-2733
MStore API <= 3.9.0 - Authentication Bypass
Medium
CVE-2023-2284
WP Activity Log Premium <= 4.5.0 - Missing Authorization via ajax_switch_db
Medium
CVE-2023-2285
WP Activity Log Premium <= 4.5.0 - Cross-Site Request Forgery via ajax_switch_db
Medium
CVE-2023-23900
Easy Forms for Mailchimp <= 6.8.8 - Reflected Cross-Site Scripting via 'sql_error'
High
CVE-2023-2757
Waiting: One-click countdowns <= 0.6.2 - Missing Authorization Checks leading to Authenticated (Subscriber+) Stored Cross-Site Scripting
Critical
CVE-2023-30191
Improper neutralization of SQL parameter in Prestaeg - CDesigner module for PrestaShop
Medium
CVE-2023-31544
alkacon-OpenCMS vulnerable to stored Cross-site Scripting
Medium
CVE-2021-27131
Moodle vulnerable to stored Cross-site Scripting
Medium
CVE-2023-2631
Jenkins Code Dx Plugin missing permission checks
Medium
CVE-2023-2195
Jenkins Code Dx Plugin cross-site request forgery vulnerability
Medium
CVE-2023-32988
Jenkins Azure VM Agents Plugin missing permission checks
Medium
CVE-2023-32993
Jenkins SAML Single Sign On(SSO) Plugin missing hostname validation
Medium
CVE-2023-32982
Jenkins Ansible Plugin stores and displays secrets in plain text
Low
CVE-2023-33000
Jenkins NS-ND Integration Performance Publisher Plugin displays credentials without masking
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.