High
CVE-2023-27453
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2022-42882
Simple CSV/XLS Exporter <= 1.5.8 - CSV Injection
Medium
CVE-2023-27446
DeepL Pro API translation <= 2.1.4 - Cross-Site Request Forgery via saveSettings
Medium
CVE-2023-27458
WpStream – Live Streaming, Video on Demand, Pay Per View <= 4.4.10 - Cross-Site Request Forgery via wpstream_settings
Medium
CVE-2023-1116
Pimcore vulnerable to Cross Site Scripting in Email Blacklist
Medium
CVE-2023-1117
Pimcore vulnerable to Cross Site Scripting in image/video thumbnail config
Medium
CVE-2023-1115
Pimcore vulnerable to Cross Site Scripting in Documents Link Editable
High
CVE-2023-22738
vantage6 vulnerable to Improper Preservation of Permissions
Medium
CVE-2023-26491
rsshub vulnerable to Cross-site Scripting via unvalidated URL parameters
Medium
CVE-2022-1274
HTML Injection in Keycloak Admin REST API
High
CVE-2022-4137
Keycloak Cross-site Scripting on OpenID connect login service
Unrated
drupal-contrib-2023-008
drupal/group_forum - SA-CONTRIB-2023-008
Medium
CVE-2022-39228
vantage6 is a privacy preserving federated learning infrastructure for secure insight exchange. vantage6 does not inform the user of wrong username/password combination if the username actually exists
Medium
CVE-2022-1438
Keycloak vulnerable to Cross-site Scripting
Unrated
drupal-contrib-2023-006
drupal/better_social_sharing_buttons - SA-CONTRIB-2023-006
Low
CVE-2021-4326
Imperative CLI vulnerable to Command Injection
Medium
CVE-2023-27456
Total Theme <= 2.1.19 - Authenticated(Subscriber+) Plugin Activation
Medium
CVE-2023-0395
menu shortcode <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-27461
When Last Login <= 1.2.1 - Cross-Site Request Forgery via wll_hide_subscription_notice
High
CVE-2023-0441
Gallery Blocks with Lightbox <= 3.0.7 - Missing Authorization in pgc_sgb_action_wizard
Medium
CVE-2023-27460
CP Contact Form with Paypal <= 1.3.34 - Authenticated Feedback Submission
Medium
CVE-2023-32500
Woodmart <= 7.1.1 - Cross-Site Request Forgery to License Update
Medium
007af51b-95b5-4b12-9f74-abf31f6de341
Real Estate 7 <= 3.3.4 - Cross-Site Request Forgery
Critical
CVE-2023-23315
Improper neutralization of an SQL parameter in stripejs module for PrestaShop
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.