High
CVE-2023-22465
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Critical
CVE-2014-125051
himiklab yii2-jqgrid-widget vulnerable to SQL Injection
Critical
CVE-2023-22457
XWiki CKEditor.HTMLConverter vulnerable to Remote Code Execution via Cross-Site Request Forgery
Critical
CVE-2015-10018
DBRisinajumi d2files SQL Injection vulnerability
Medium
CVE-2022-45935
Apache James server allows an attacker with local access to access private user data in transit
Medium
CVE-2022-45787
Apache James MIME4J vulnerable to information disclosure to local users
Critical
CVE-2016-15011
dssp vulnerable to Improper Restriction of XML External Entity Reference
Critical
CVE-2018-25066
nodebatis SQL Injection vulnerability
Critical
CVE-2022-25923
exec-local-bin vulnerable to Command Injection
Medium
CVE-2021-32828
Nuxeo vulnerable to Reflected Cross-Site Scripting leading to Remote Code Execution
Medium
CVE-2022-4749
Posts List Designer by Category <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scriptiong via Shortcode
Medium
CVE-2023-0071
WP Tabs <= 2.1.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-0074
WP Social Widget <= 2.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4837
CPO Companion <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4792
News & Blog Designer Pack <= 3.2 - Authenticated (Contributor+) Stored Cross-Site SQcripting via Shortcode
Critical
CVE-2023-0556
ContentStudio <= 1.2.5 - Missing Authorization
Medium
CVE-2023-0097
Post Grid, Post Carousel, & List Category Posts <= 2.4.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4496
SAML Single Sign On – SSO Login Premium Multisite < 20.0.7 - Open Redirect
Critical
CVE-2020-36640
bonita-connector-webservice XML External Entity vulnerability
Critical
CVE-2020-36641
aXMLRPC XML External Entity vulnerability
Medium
CVE-2017-20162
Vercel ms Inefficient Regular Expression Complexity vulnerability
High
CVE-2021-4305
robots-txt-guard Inefficient Regular Expression Complexity vulnerability
High
CVE-2023-22461
@mattkrick/sanitize-svg vulnerable to Cross-Site Scripting (XSS)
Medium
CVE-2019-25095
A vulnerability, which was classified as problematic, was found in kakwa LdapCherry up to 0.x. Affected is an unknown function of the component URL Handler. The manipulation leads to cross site script
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.