Medium
CVE-2023-5651
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-44690
mycli has Inadequate Encryption Strength
High
CVE-2023-45815
Viewing wget extractor output while logged in as an admin allows archived JS to execute in the admins context
High
CVE-2023-45820
Directus crashes on invalid WebSocket message
Low
CVE-2023-45809
Wagtail vulnerable to disclosure of user names via admin bulk action views
High
CVE-2023-45277
Yamcs Path Traversal vulnerability
Critical
CVE-2023-45278
Yamcs API Directory Traversal vulnerability
Medium
CVE-2023-45819
TinyMCE XSS vulnerability in notificationManager.open API
Medium
CVE-2023-45818
TinyMCE mXSS vulnerability in undo/redo, getContent API, resetContent API, and Autosave plugin
Medium
CVE-2023-45814
Bunkum tokens cached in the AuthenticationService are susceptible to a use-after-free
Medium
CVE-2023-5654
React Developer Tools extension Improper Authorization vulnerability
High
CVE-2023-46227
Apache InLong Deserialization of Untrusted Data Vulnerability
Medium
CVE-2023-25753
Apache Shenyu Server Side Request Forgery vulnerability
High
CVE-2023-46229
LangChain before 0.0.317 allows SSRF via document_loaders/recursive_url_loader.py because crawling can proceed from an external server to an internal server.
Medium
CVE-2023-46203
Just Custom Fields <= 3.3.2 - Missing Authorization on AJAX Actions
Medium
CVE-2023-46212
WP EXtra <= 6.2 - Missing Authorization to Export Settings
High
CVE-2023-35041
Webpushr <= 4.34.0 - Cross-Site Request Forgery to Local File Inclusion via menu
Medium
CVE-2023-33215
Taggbox <= 3.3 - Missing Authorization
Medium
CVE-2023-46204
Duplicate Theme <= 0.1.6 - Cross-Site Request Forgery via themeDuplicationAction
Medium
CVE-2023-5618
Modern Footnotes <= 1.4.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-46202
Auto Login New User After Registration <= 1.9.6 - Cross-Site Request Forgery to Settings Modification
Medium
CVE-2023-46211
Ultimate Addons for WPBakery Page Builder <= 3.19.14 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
79899dc1-4953-4f95-95f5-853d24e7b9ab
Just Custom Fields <= 3.3.2 - Cross-Site Request Forgery on AJAX Actions
Medium
CVE-2023-46209
Grid Plus <= 1.3.4 - Reflected Cross-Site Scripting via grid_id
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.