Medium
CVE-2023-27430
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-23672
GiveWP <= 2.25.1 - Authenticated (Contributor+) Arbitrary Content Deletion
Medium
CVE-2023-1337
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Missing Authorization in 'clear_uucss_logs'
Medium
CVE-2023-1342
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Cross-Site Request Forgery via 'ucss_connect'
Medium
CVE-2023-1340
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Cross-Site Request Forgery via 'clear_uucss_logs'
Medium
CVE-2023-1333
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Missing Authorization in 'clear_page_cache'
Medium
CVE-2023-1344
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Cross-Site Request Forgery via 'uucss_update_rule'
Medium
CVE-2023-1338
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Missing Authorization in 'attach_rule'
Medium
CVE-2023-1339
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Missing Authorization in 'uucss_update_rule'
Medium
CVE-2023-1343
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Cross-Site Request Forgery via 'attach_rule'
Medium
CVE-2023-1286
Cross-site Scripting (XSS) in pimcore/pimcore
Critical
CVE-2023-26110
node-bluetooth is vulnerable to Buffer Overflow via the findSerialPortChannel method due to improper user input length validation
Critical
CVE-2023-26109
node-bluetooth-serial-port is vulnerable to Buffer Overflow via the findSerialPortChannel
Critical
CVE-2023-1283
builderio/qwik is vulnerable to code injection
Critical
CVE-2023-24777
SQL Injection in Funadmin
Medium
CVE-2022-45819
Popup Maker <= 1.17.1 - Missing Authorization via save_popup_enabled_state
Medium
5778ba3d-6670-47ad-ae65-50b6fb8e5db0
Real Estate 7 Theme <= 3.3.4 - Unauthenticated Arbitrary Email Sending
Medium
CVE-2023-1323
Easy Forms for Mailchimp <= 6.8.8 - Authenticated (Administrator+) Cross-Site Scripting via Form Name
Critical
CVE-2023-25207
Multiple improper neutralization of SQL parameters in DPD France module for PrestaShop
Critical
CVE-2023-24782
SQL Injection in Funadmin
Critical
CVE-2023-24773
SQL Injection in Funadmin
Unrated
drupal-contrib-2023-009
drupal/gutenberg - SA-CONTRIB-2023-009
High
CVE-2023-27480
XWiki Platform vulnerable to data leak via Improper Restriction of XML External Entity Reference
Critical
CVE-2023-27479
org.xwiki.platform:xwiki-platform-panels-ui vulnerable to Eval Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.