Medium
CVE-2023-28336
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,071
Reset filters
Critical
CVE-2023-25655
baserCMS allows any file to be uploaded
Critical
CVE-2023-25654
baserCMS File Uploader Remote Code Execution (RCE) vulnerability
Medium
CVE-2023-28438
Pimcore vulnerable to improper quoting of filters in Custom Reports
Medium
CVE-2023-1578
Pimcore Remote Code Execution vulnerability in Search function
High
CVE-2023-1545
Teampass SQL Injection vulnerability
High
CVE-2023-28426
SVG Sanitizer library <= 0.15.4 - Cross-Site Scripting Bypass
Medium
CVE-2023-28429
Pimcore has Cross-site Scripting vulnerability in DataObject tooltip field
Medium
CVE-2023-1515
Pimcore vulnerable to Cross-site Scripting (XSS) in Redirects
Medium
CVE-2023-1517
Pimcore has Cross site Scripting vulnerability in Schedule tab of Documents
Critical
CVE-2023-28115
PHAR deserialization allowing remote code execution
High
CVE-2023-28108
Improper quoting of columns when calling methods "getByUuid" & "exists" on UUID Model
Medium
CVE-2023-28106
Cross-site Scripting (XSS) in UrlSlug Data type
Medium
CVE-2023-1463
Improper Authorization in nilsteampassnet/teampass
Medium
ghsa-2xpm-cmvw-3jcc
Reflected XSS in Application Logger module
Medium
CVE-2023-1429
Cross-site Scripting (XSS) in Document Types
Medium
ghsa-rrwm-8wqm-gwgv
Cross-site Scripting (XSS) - stored in Print Documents
High
CVE-2023-28104
DDOS attack on graphql endpoints
Unrated
drupal-contrib-2023-011
drupal/responsive_media_image - SA-CONTRIB-2023-011
Unrated
drupal-contrib-2023-010
drupal/media_responsive_thumbnail - SA-CONTRIB-2023-010
Unrated
drupal-core-2023-004
Drupal core - SA-CORE-2023-004
Unrated
drupal-core-2023-003
Drupal core - SA-CORE-2023-003
Unrated
drupal-core-2023-002
Drupal core - SA-CORE-2023-002
Medium
CVE-2023-27577
Path Traversal Vulnerability in `LESS` Parser allows reading of sensitive server files
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.