Medium
CVE-2023-44263
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-5337
Contact form Form For All <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-24385
Media Library Assistant <= 3.11 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2023-44150
ProfilePress <= 4.13.2 - Information Disclosure via Debug Log
Medium
CVE-2023-44990
WOLF <= 1.0.7.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-5334
WP Responsive header image slider <= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-44986
Abandoned Cart Lite for WooCommerce <= 5.15.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
39003835-80df-49c7-982a-346bf328565c
WPGetAPI 2.1.0 - 2.2.1 - Authenticated (Subscriber+) Arbitrary Options Update
Medium
CVE-2023-44987
Timely Booking Button <= 2.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-5323
Dolibarr Cross-site Scripting vulnerability
Medium
CVE-2023-5318
Microweber uses hard coded credentials
High
CVE-2023-5319
phpMyFAQ Cross-site Scripting vulnerability
Critical
CVE-2023-5320
phpMyFAQ Cross-site Scripting vulnerability
Critical
CVE-2023-5316
phpMyFAQ Cross-site Scripting vulnerability
Medium
CVE-2023-5227
phpMyFAQ allows unrestricted file types in image field
Medium
CVE-2023-5317
phpMyFaq Cross-site Scripting vulnerability
Medium
CVE-2023-44270
PostCSS line return parsing error
Unrated
pysec-2023-182
opencv-contrib-python-headless versions before v4.8.1.78 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863. opencv-contrib-python-headless v4.8.1.78 upgrades the bundled libwebp
Unrated
pysec-2023-181
opencv-contrib-python versions before v4.8.1.78 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863. opencv-contrib-python v4.8.1.78 upgrades the bundled libwebp binary to v1.3.2.
Unrated
pysec-2023-183
opencv-python versions before v4.8.1.78 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863. opencv-python v4.8.1.78 upgrades the bundled libwebp binary to v1.3.2.
Unrated
pysec-2023-184
opencv-python-headless versions before v4.8.1.78 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863. opencv-python-headless v4.8.1.78 upgrades the bundled libwebp binary to v1.3.2
High
CVE-2023-43655
Composer Remote Code Execution vulnerability via web-accessible composer.phar
High
CVE-2023-39410
Apache Avro Java SDK vulnerable to Improper Input Validation
High
CVE-2023-5289
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.4.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.