High
CVE-2023-25671
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
CVE-2023-25672
TensorFlow has Null Pointer Error in LookupTableImportV2
High
CVE-2023-25674
TensorFlow has Null Pointer Error in RandomShuffle with XLA enable
High
CVE-2023-25801
TensorFlow has double free in Fractional(Max/Avg)Pool
Medium
CVE-2022-40208
Moodle may allow students to bypass sequential navigation during a quiz attempt
Medium
18f04566-3a63-41f3-aa9b-766304d56499
TH Side Cart and Menu Cart for Woocommerce <= 1.1.1 - Cross-Site Request Forgery
Medium
CVE-2023-20861
Spring Framework vulnerable to denial of service via specially crafted SpEL expression
Medium
CVE-2023-20859
Spring Vault vulnerable to insertion of sensitive information into a log file
Medium
CVE-2023-1402
Moodle may display roles to users who don't have access to them
High
CVE-2023-24788
NotrinosERP vulnerable to SQL Injection
Medium
CVE-2023-28330
Moodle arbitrary file read vulnerability
Critical
CVE-2023-28333
Moodle's Mustache pix helper contained a potential Mustache injection risk if combined with user input
Medium
CVE-2023-28332
Moodle vulnerable to Cross-site Scripting when algebra filter enabled but not functional
Medium
CVE-2023-28331
Moodle vulnerable to Cross-site Scripting
High
CVE-2023-28329
Moodle SQL Injection vulnerability
High
CVE-2023-28335
Moodle vulnerable to Cross-site Request Forgery
Medium
CVE-2023-28334
Moodle may allow authenticated users to enumerate other user's names via learning plans page
Medium
CVE-2023-28336
Moodle may allow teachers to access the names of users they could not otherwise access
High
CVE-2023-1370
json-smart Uncontrolled Recursion vulnerability
Critical
CVE-2023-25655
baserCMS allows any file to be uploaded
Critical
CVE-2023-25654
baserCMS File Uploader Remote Code Execution (RCE) vulnerability
Medium
CVE-2023-28443
directus vulnerable to Insertion of Sensitive Information into Log File
High
CVE-2023-27094
Hippo4j privilege escalation issue
Critical
CVE-2023-26114
code-server vulnerable to Missing Origin Validation in WebSockets
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.