Unrated
drupal-contrib-2023-053
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,071
Reset filters
High
CVE-2023-49087
Validation of SignedInfo
Medium
CVE-2023-32065
OroCommerce get-totals-for-checkout API endpoint returns unwanted data
Medium
CVE-2023-32064
OroCommerce Customer Portal Incorrect Customer and Customer Group Frontend Menus pages visibility
Medium
CVE-2023-32063
OroCRMCallBundle has incorrect call view page visibility
Medium
CVE-2023-32062
OroCalendarBundle has incorrect system calendar events visibility
High
CVE-2022-41951
OroPlatform vulnerable to path traversal during temporary file manipulations
High
CVE-2023-49075
Pimcore Admin UI has Two Factor Authentication disabled for non admin security firewalls
Medium
CVE-2023-49146
Cross-site Scripting in DOMSanitizer
Medium
CVE-2023-48707
Cleartext Storage of Sensitive Information in HMAC SHA256 Authentication
Medium
CVE-2023-48708
Insertion of Sensitive Information into Log
High
CVE-2023-48701
Cross-site Scripting via uploaded assets
High
CVE-2023-47350
Cross Site Request Forgery in SwiftyEdit
Medium
CVE-2023-47380
Cross-site Scripting in Admidio
Medium
CVE-2023-48294
LibreNMS has Broken Access control on Graphs Feature
Medium
CVE-2023-48295
LibreNMS Cross-site Scripting at Device groups Deletion feature
Medium
CVE-2023-46745
LibreNMS vulnerable to rate limiting bypass on login page
Medium
CVE-2023-48648
Concrete CMS allows unauthorized access because directories can be created with insecure permissions
Low
CVE-2023-48649
Concrete CMS Cross-site Scripting vulnerability
Medium
ghsa-w98g-5fmx-wm4x
pocketmine/raklib reliable-ordered queue size is unlimited, allowing a session to hog server memory
Medium
CVE-2023-48219
TinyMCE vulnerable to mutation Cross-site Scripting via special characters in unescaped text nodes
High
CVE-2023-47637
Pimcore SQL Injection in Admin Grid Filter API through Multiselect::getFilterConditionExt()
Medium
CVE-2023-47636
pimcore/admin-ui-classic-bundle Full Path Disclosure via re-export document
Unrated
drupal-contrib-2023-052
drupal/mollie - SA-CONTRIB-2023-052
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.