Medium
CVE-2023-46199
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-46191
Open Graph Metabox <= 1.4.4 - Cross-Site Request Forgery
High
3bcd61d4-4775-4297-b7f5-664991fcd6d2
GeoDirectory <= 2.3.28 - Authenticated (Administrator+) SQL Injection via orderby
High
CVE-2023-5336
iPanorama 360 – WordPress Virtual Tour Builder <= 1.8.0 - Authenticated (Contributor+) SQL Injection via Shortcode
Medium
CVE-2023-46189
Google Calendar Events <= 3.2.5 - Cross-Site Request Forgery via bulk_actions
Medium
CVE-2023-46200
Smart App Banner <= 1.1.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-46198
Appointment Calendar <= 2.9.6 - Cross-Site Request Forgery
Medium
CVE-2023-45803
urllib3's request body not stripped after redirect from 303 status changes request method to GET
Critical
CVE-2023-42627
Liferay Portal and Liferay DXP Vulnerable to XSS in the Commerce Module
Medium
CVE-2023-45807
OpenSearch Issue with tenant read-only permissions
High
ghsa-8wx3-324g-w4qq
OpenSearch uncontrolled resource consumption
Critical
ghsa-rc4v-99cr-pjcm
Prototype Pollution in ali-security/mongoose
Medium
CVE-2023-44394
MantisBT may disclose project names to unauthorized users
Medium
CVE-2023-43794
nocodb SQL Injection vulnerability
High
CVE-2023-40180
Silverstripe GraphQL has DDOS Vulnerability due to lack of protection against recursive queries
Medium
CVE-2023-45669
WebAuthn4J Spring Security Improper signature counter value handling
Critical
CVE-2023-45144
XWiki Identity Oauth Privilege escalation (PR)/remote code execution from login screen through unescaped URL parameter
Critical
CVE-2023-42628
Liferay Portal and Liferay DXP Vulnerable to XSS in the Wiki Widget
Critical
CVE-2023-44311
Liferay Portal and Liferay DXP Vulnerable to XSS via the OAuth2ProviderApplicationRedirect Class
Critical
CVE-2023-44310
Liferay Portal and Liferay DXP Vulnerable to XSS via the Page Tree Menu
Critical
CVE-2023-44309
Liferay Portal and Liferay DXP Vulnerable to XSS in the Fragment Components
Critical
CVE-2023-42629
Liferay Portal and Liferay DXP Vulnerable to Stored XSS in the Manage Vocabulary Page
Critical
CVE-2023-42497
Liferay Portal and Liferay DXP Vulnerable to Reflected XSS via the Export for Translation Page
Critical
CVE-2023-45138
XWiki Change Request Application UI XSS and remote code execution through change request title
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.