Medium
d7a02502-bc3c-4fd1-b6db-7b3c476c141f
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-1911
Blocksy Companion <= 1.8.81 - Authenticated(Subscriber+) Sensitive Information Exposure via blocksy_posts shortcode
Medium
CVE-2023-29097
a3 Portfolio <= 3.1.0 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2023-1809
Download Manager Pro <= 6.2.9 - Unauthenticated Information Disclosure
Medium
7c7f6ef2-6c50-4739-8844-0db7d9ffe7f7
MC Woocommerce Wishlist <= 1.5.4 - Cross-Site Request Forgery
Critical
CVE-2023-1730
SupportCandy <= 3.1.4 - Unauthenticated SQL Injection via parse_user_filters
Medium
CVE-2023-1861
Limit Login Attempts <= 1.7.1 - Authenticated(Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2023-1805
Product Catalog Feed by PixelYourSite <= 2.1.0 - Reflected Cross-Site Scripting via 'page'
Medium
0be21ac7-4f61-44fc-9ffc-ab65faa549f6
tencentcloud-cos <= 1.0.7 - Cross-Site Request Forgery
Critical
CVE-2023-29017
vm2 vulnerable to sandbox escape
High
CVE-2023-29008
SvelteKit framework has Insufficient CSRF protection for CORS requests
Medium
CVE-2023-29014
Goobi viewer Core Reflected Cross-Site Scripting Vulnerability Using LOGID Parameter
Medium
CVE-2023-29015
Goobi viewer Core has Cross-Site Scripting Vulnerability in User Comments
Medium
CVE-2023-29016
Goobi viewer Core has Cross-Site Scripting Vulnerability in User Nicknames
High
CVE-2023-28707
Apache Airflow Drill Provider vulnerable to improper input validation
Critical
CVE-2023-28706
Apache Airflow Hive Provider vulnerable to code injection
Medium
CVE-2023-34005
Front End Users <= 3.2.24 - Cross-Site Request Forgery
Medium
CVE-2023-29440
Simple Job Board <= 2.10.3 - Cross-Site Request Forgery via sjb_save_settings_section
Medium
CVE-2023-30489
Email Subscription Popup <= 1.2.16 - Reflected Cross-Site Scripting
Medium
5ccfafaf-902f-4142-90b3-9f70800eb377
Front End Users <= 3.2.24 - Missing Authorization to Unauthenticated Registered User Deletion
Medium
CVE-2023-23704
Comments Ratings <= 1.1.6 - Cross-Site Request Forgery
Medium
CVE-2023-25487
PixTypes <= 1.4.14 - Cross-Site Request Forgery
Medium
ebea0ec0-f7ee-41c5-b0a5-a78e9cd11d41
Superb Social Media Share Buttons and Follow Buttons <= 1.1.3 - Cross-Site Request Forgery via spbsmAjax
Medium
e74be387-1413-49c5-91c6-66e620562b42
Hustle <= 7.6.4 = Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.