Low
CVE-2023-49279
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Low
CVE-2023-49278
Brute force exploit can be used to collect valid usernames
Low
CVE-2023-49274
SMTP misconfiguration leading to "Forgot Password" exploit that leaks registered user email.
Medium
CVE-2023-49273
Privilege Escalation using Spoofing
Low
CVE-2023-49089
Using the directory back payload (“/../”) in a package name allows placement of package in other folders.
Medium
CVE-2023-48313
DOM-XSS on Backoffice login screen.
Low
CVE-2023-48227
Backoffice User can bypass "Publish" restriction
Low
CVE-2023-38694
Possible injection of HTML into user invite mails
Medium
CVE-2023-6379
Alkacon OpenCMS XSS via Mercury template
High
CVE-2023-6753
Path Traversal in GitHub repository mlflow/mlflow prior to 2.9.2.
Medium
CVE-2023-50375
Google Language Translator <= 6.0.19 - Missing Authorization via admin notifications
Medium
CVE-2023-6383
Debug Log Manager <= 2.2.2 - Directory Listing to Sensitive Information Disclosure
Medium
CVE-2023-6161
WP Crowdfunding <= 2.1.8 - Reflected Cross-Site Scripting
High
CVE-2023-6826
E2Pdf <= 1.20.25 - Authenticated (Administrator+) Arbitrary File Upload
Low
CVE-2023-50263
Unauthenticated db-file-storage views
Critical
CVE-2023-43364
Searchor CLI's Search vulnerable to Arbitrary Code using Eval
High
CVE-2023-6709
Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository mlflow/mlflow prior to 2.9.2.
Critical
CVE-2023-49583
Escalation of privileges in @sap/xssec
Critical
CVE-2023-50423
Improper Privilege Management in sap-xssec
Medium
CVE-2023-49804
Password Change Vulnerability
High
CVE-2023-49799
SSRF & Credentials Leak
Medium
CVE-2023-49798
OpenZeppelin Contracts and Contracts Upgradeable duplicated execution of subcalls in v4.9.4
High
CVE-2023-6636
Greenshift – animation and page builder blocks <= 7.6.2 - Authenticated (Administrator+) Arbitrary File Upload
Medium
CVE-2023-6637
CAOS | Host Google Analytics Locally <= 4.7.14 - Missing Authorization to Unauthenticated Plugin Settings Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.