Medium
CVE-2022-38077
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-0589
WP Image Carousel WordPress - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
07c0b4c5-d76e-4bdc-87d1-3144a1466c77
SupportCandy <= 3.1.3 - Sensitive Data Exposure
Medium
CVE-2022-40702
Advanced Local Pickup for WooCommerce <= 1.5.2 - Missing Authorization
Medium
0472804e-00cc-4c4c-97aa-86f433f65782
Maps Widget for Google Maps <= 4.23 - Cross-Site Request Forgery via dismiss_notice
Critical
CVE-2023-26858
Improper neutralization of SQL parameter in faqs module for PrestaShop
Medium
CVE-2023-28628
lambdaisland/uri `authority-regex` returns the wrong authority
High
CVE-2023-28638
Snappier vulnerable to buffer overrun due to improper restriction of operations within the bounds of a memory buffer
Medium
CVE-2023-28640
Apiman vulnerable to permissions bypass due to missing check on API key URL
Medium
CVE-2023-28604
Fluid Components TYPO3 extension vulnerable to Cross-Site Scripting
Medium
CVE-2023-22251
Magento Open Source allows Incorrect Authorization
Medium
CVE-2023-22250
Magento Open Source allows Improper Access Control
High
CVE-2023-22247
Magento Open Source allows XML Injection
Medium
CVE-2023-25661
TensorFlow Denial of Service vulnerability
Medium
CVE-2023-27096
Hippo4j allows attacker to obtain sensitive info via ConfigVerifyController function of Tenant Management module
High
CVE-2023-27296
Apache InLong vulnerable to JDBC Deserialization of Untrusted Data
High
CVE-2023-28867
GraphQL Java vulnerable to stack consumption
Medium
CVE-2023-28778
Pagination by BestWebSoft <= 1.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-27922
Newsletter <= 7.6.8 - Reflected Cross-Site Scripting
High
CVE-2023-0889
Themeflection Numbers <= 1.8.1 - Authenticated(Subscriber+) Privilege Escalation via tf_numb_save_licenses
Medium
CVE-2023-25966
Filebird <= 5.1.4 - Missing Authorization via resAdminPermissionsCheck
High
CVE-2023-0765
Gallery by BestWebSoft <= 4.6.9 - Authenticated (Author+) SQL Injection
High
CVE-2022-47444
ProfilePress <= 4.5.3 - Unauthenticated Cross-Site Scripting
Medium
CVE-2023-28789
Contact Forms by Cimatti <= 1.5.4 - Reflected Cross-Site Scripting via 'form-field-id', 'edit-fid', 'id', 'name', 'type', 'description' Parameters
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.