Medium
CVE-2023-0780
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2024-23681
Arbitrary code execution in de.tum.in.ase:artemis-java-test-sandbox
Critical
CVE-2023-0777
Authentication Bypass by Primary Weakness in GitHub repository modoboa/modoboa prior to 2.0.4.
Low
CVE-2023-24816
IPython vulnerable to command injection via set_term_title
Medium
CVE-2023-24230
Formwork Cross-site Scripting (XSS) from Page title field
Critical
CVE-2022-4903
CodenameOne Pending Intent vulnerability
Critical
CVE-2015-10077
SQL injection in webbuilders-group silverstripe-kapost-bridge
High
CVE-2023-22832
XML External Entity Reference in Apache NiFi
Medium
CVE-2023-24815
StaticHandler disclosure of classpath resources on Windows when mounted on a wildcard route
Medium
CVE-2023-25040
Shortcodes Ultimate <= 5.12.6 - Authenticated (Contributor+) Stored Cross Site Scripting
Medium
CVE-2023-25702
Quick Paypal Payments <= 5.7.25 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-23800
Shortcodes Ultimate <= 5.12.6 - Authenticated (Subscriber+) Server-Side Request Forgery
Medium
CVE-2023-25050
Shortcodes Ultimate <= 5.12.6 - Authenticated (Subscriber+) Arbitrary File Read via Shortcode
Medium
CVE-2023-0832
Under Construction <= 3.96 - Cross-Site Request Forgery via admin_action_install_weglot
Medium
CVE-2023-25472
Podlove Podcast Publisher <= 3.8.3 - Cross-Site Request Forgery
Medium
CVE-2023-25793
Link Juice Keeper <= 2.0.2 - Authenticated(Admin+) Stored Cross-Site Scripting
High
CVE-2023-0759
privilege chaining in cockpit-hq/cockpit
Medium
CVE-2023-0328
WPCode <= 2.0.6 - Missing Authorization to Sensitive Key Disclosure/Update
Medium
CVE-2023-0377
Scriptless Social Sharing <= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Block Options
High
CVE-2022-3568
ImageMagick Engine <= 1.7.5 - Cross-Site Request Forgery to PHAR Deserialization
High
CVE-2023-0487
My Sticky Elements <= 2.0.8 - Authenticated (Admin+) SQL Injection
Medium
CVE-2023-25166
@sideway/formula contains Regular Expression Denial of Service (ReDoS) Vulnerability
High
CVE-2023-24814
TYPO3 is vulnerable to Cross-Site Scripting via frontend rendering
Critical
CVE-2022-45982
Deserialization of Untrusted Data in thinkphp
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.