Critical
CVE-2023-45384
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
CVE-2023-45383
Improper Limitation of a Pathname to a Restricted Directory in Common-Services - Sonice Etiquetage module for PrestaShop
Critical
CVE-2023-45379
Improper neutralization of SQL parameter in Posthemes Rotator Img module for PrestaShop
Critical
CVE-2023-43661
Cachet vulnerable to Authenticated Remote Code Execution
Low
CVE-2023-45143
Undici's cookie header not cleared on cross-origin redirect in fetch
Critical
CVE-2023-45133
Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code
High
CVE-2023-43667
SQL Injection in Apache InLong
Critical
CVE-2023-43668
Authorization Bypass in Apache InLong
Medium
CVE-2023-43666
Insufficient Verification of Data Authenticity in Apache InLong
High
CVE-2023-5591
SQL injection in librenms/librenms
Medium
CVE-2023-5181
WP Discord Invite <= 2.5.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-46076
WooCommerce PDF Invoice Builder <= 1.2.103 - Reflected Cross-Site Scripting
Medium
fadc1374-fe4d-414a-af84-1a4de5b89807
404 Solution <= 2.33.0 - Sensitive Information Exposure
High
CVE-2023-5355
Awesome Support <= 6.1.4 - Authenticated (Submitter+) Arbitrary File Deletion
Medium
CVE-2023-5354
Awesome Support <= 6.1.4 - Reflected Cross-Site Scripting
Medium
CVE-2023-46071
Protección de Datos RGPD <= 3.1.0 - Reflected Cross-Site Scripting
Medium
CVE-2023-5070
Social Media Share Buttons & Social Sharing Icons <= 2.8.5 - Information Exposure
Medium
CVE-2023-46074
FreshMail For WordPress <= 2.3.2 - Reflected Cross-Site Scripting
Medium
CVE-2023-46082
Broken Link Checker | Finder <= 2.4.2 - Missing Authorization via moblc_auth_save_settings
Medium
CVE-2023-5602
Social Media Share Buttons & Social Sharing Icons <= 2.8.5 - Cross-Site Request Forgery
Medium
CVE-2023-5454
Templately <= 2.2.5 - Improper Authorization to Arbitrary Post Deletion
Medium
CVE-2023-46083
Contact Form builder with drag & drop - Kali Forms <= 2.3.27 - Missing Authorization via Contact Form
Medium
CVE-2023-5530
Ninja Forms Contact Form <= 3.6.33 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-46070
EG-Attachments <= 2.1.3 - Reflected Cross-Site Scripting via 'paged'
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.