High
CVE-2015-8371
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-44146
Checkfront Online Booking System <= 3.6 - Cross-Site Request Forgery
Medium
CVE-2023-4774
WP-Matomo Integration (WP-Piwik) <= 1.0.28 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-4783
Magee Shortcodes <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-4716
Media Library Assistant <= 3.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-4388
EventON <= 2.1.7 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2023-4821
Drag and Drop Multiple File Upload for WooCommerce <= 1.1.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-5237
Memberlite Shortcodes <= 1.3.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2023-4819
Shared Files <= 1.7.5 - Unauthenticated Stored Cross-Site Scripting
Critical
CVE-2023-39640
Improper neutralization of SQL parameter in Cookie Law - Banner + Cookie blocker module for PrestaShop
High
CVE-2023-41890
Sustainsys.Saml2 Insufficient Identity Provider Issuer Validation
High
CVE-2023-43496
Jenkins temporary plugin file created with insecure permissions
Medium
CVE-2023-43494
Jenkins does not exclude sensitive build variables from search
Low
CVE-2023-43498
Jenkins temporary uploaded file created with insecure permissions
Medium
CVE-2023-43502
Jenkins Build Failure Analyzer Plugin Cross-Site Request Forgery vulnerability
Medium
CVE-2023-43500
Jenkins Build Failure Analyzer Plugin Cross-Site Request Forgery vulnerability
Low
CVE-2023-43497
Jenkins temporary uploaded file created with insecure permissions
Medium
CVE-2023-43501
Jenkins Build Failure Analyzer Plugin missing permission check
High
CVE-2023-43495
Jenkins Cross-site Scripting vulnerability
High
CVE-2023-43499
Jenkins Build Failure Analyzer Plugin Cross-site Scripting vulnerability
Critical
CVE-2023-5256
Drupal core - SA-CORE-2023-006
Critical
CVE-2019-19450
ReportLab vulnerable to remote code execution via paraparser
Low
CVE-2023-34047
Spring for GraphQL may be exposed to GraphQL context with values from a different session
High
CVE-2023-4853
Quarkus HTTP vulnerable to incorrect evaluation of permissions
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.