Medium
CVE-2023-24769
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2022-48115
Cross-site Scripting in jspreadsheet
High
CVE-2023-23923
Moodle Improper Access Control vulnerability
Medium
CVE-2023-23922
Moodle Cross-site Scripting vulnerability
Medium
CVE-2023-23921
Moodle Cross-site Scripting vulnerability
High
CVE-2021-33926
Server-Side Request Forgery in Plone CMS
Unrated
CVE-2021-33226
Buffer Overflow vulnerability in Saltstack v.3003 and before allows attacker to execute arbitrary code via the func variable in salt/salt/modules/status.py file.
Medium
CVE-2023-0880
Misinterpretation of Input in thorsten/phpmyfaq
High
CVE-2023-0877
Code Injection in froxlor/froxlor
Medium
CVE-2023-25991
RegistrationMagic <= 5.1.9.2 - Cross-Site Request Forgery leading to Form Metadata Deletion
Medium
f0c7324f-4c22-44e0-8d2a-9b95fd89467d
vSlider Multi Image Slider <= 4.1.2 - Missing Authorization
High
CVE-2023-0895
WP Coder – add custom html, css and js code <= 2.5.3 - Authenticated (Admin+) SQL Injection
Medium
CVE-2023-23817
Simple PDF Viewer <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via googlepdf Shortcode
Medium
CVE-2023-23717
Portfolio Slideshow <= 1.13.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-23827
Google Maps v3 Shortcode <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-40203
Advanced Dynamic Pricing for WooCommerce <= 4.1.5 - Missing Authorization in ajaxCalculateSeveralProducts function
Medium
CVE-2023-23926
XML External Entity (XXE) vulnerability in apoc.import.graphml
Medium
CVE-2023-23936
CRLF Injection in Nodejs ‘undici’ via host
High
CVE-2023-24807
Regular Expression Denial of Service in Headers
High
CVE-2023-25653
Improper calculations in ECC implementation can trigger a Denial-of-Service (DoS)
Medium
CVE-2025-27098
Unwanted access to the entire file system vulnerability due to a missing check in `staticFiles` HTTP handler
Medium
CVE-2023-22580
Sequelize information disclosure vulnerability
Medium
ghsa-mhgm-52vg-pvvc
Privilege escalation in Strongbox
Critical
CVE-2020-19825
Cross-site Scripting in kimai/kimai
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.