High
CVE-2023-29518
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
CVE-2023-29517
Exposure of Sensitive Information to an Unauthorized Actor in org.xwiki.platform:xwiki-platform-office-viewer
Critical
CVE-2023-29516
XWiki Platform vulnerable to privilege escalation from view right on XWiki.AttachmentSelector
Medium
CVE-2023-29515
XWiki App Within Minutes app grants space admin rights that allows cross-site scripting
Critical
CVE-2023-29514
XWiki vulnerable to Code Injection in template provider administration
Medium
CVE-2023-29513
xwiki-platform-web-templates allows users to be created even when registration is disabled without validation via template macro
Critical
CVE-2023-29512
xwiki-platform-web-templates vulnerable to Eval Injection
Critical
CVE-2023-20873
Spring Boot Security Bypass with Wildcard Pattern Matching on Cloud Foundry
Medium
CVE-2023-28458
pretalx 2.3.1 before 2.3.2 allows path traversal in HTML export (a non-default feature). Organizers can trigger the overwriting (with the standard pretalx 404 page content) of an arbitrary file.
High
CVE-2023-28459
pretalx 2.3.1 before 2.3.2 allows path traversal in HTML export (a non-default feature). Users were able to upload crafted HTML documents that trigger the reading of arbitrary files.
Medium
CVE-2023-2142
Nunjucks autoescape bypass leads to cross site scripting
Medium
CVE-2023-27495
Bypass of CSRF protection in the presence of predictable userInfo
Critical
CVE-2023-29528
Cross-site Scripting in org.xwiki.commons:xwiki-commons-xml
Medium
CVE-2023-30548
Path traversal vulnerability in gatsby-plugin-sharp
Medium
CVE-2023-25601
Apache DolphinScheduler's python gateway suffered from improper authentication
Critical
CVE-2023-29926
PowerJob vulnerable to remote code execution
Critical
CVE-2023-30547
vm2 Sandbox Escape vulnerability
High
CVE-2023-30542
GovernorCompatibilityBravo may trim proposal calldata
Low
CVE-2022-4942
eslint-detailed-reporter vulnerable to cross-site scripting
Low
CVE-2023-2191
AzuraCast/AzuraCast vulnerable to cross-site scripting
Medium
CVE-2023-30616
Form Block <= 1.0.1 - Cross-Site Request Forgery
Medium
CVE-2023-1011
ChatBot <= 4.4.4 - Unauthenticated Stored Cross-Site Scripting via Cross-Site Request Forgery
Medium
CVE-2023-23657
Mail Subscribe List <= 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via smlsubform shortcode
Medium
CVE-2023-0233
ActiveCampaign – Forms, Site Tracking, Live Chat <= 8.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.