Medium
CVE-2023-41662
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-41657
HollerBox <= 2.3.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-41653
Sermon'e – Sermons Online <= 1.0.0 - Reflected Cross-Site Scripting
Low
CVE-2023-41655
authLdap <= 2.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-41656
Better Elementor Addons <= 1.3.8 - Missing Authorization
Medium
CVE-2023-41649
Ovic Product Bundle <= 1.1.2 - Missing Authorization
Medium
CVE-2023-41661
Smarty for WordPress <= 3.1.35 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-41659
Responsive Gallery Grid <= 2.3.13 - Cross-Site Request Forgery
Medium
CVE-2023-41664
Easy Newsletter Signups <= 1.0.4 - Missing Authorization
Medium
CVE-2023-41648
Login and Logout Redirect <= 2.0.2 - Open Redirect
Medium
CVE-2023-41034
DDFFileParser is vulnerable to XXE Attacks
Medium
CVE-2023-38970
Badaso vulnerable to cross-site scripting
High
CVE-2023-41665
Give - Donation Plugin <= 2.33.0 - Authenticated(Give Manager+) Privilege Escalation
Critical
CVE-2023-39641
Improper neutralization of SQL parameter in Active Design - Full Affiliates module for PrestaShop
Critical
CVE-2023-39639
Improper neutralization of SQL parameter in LeoTheme - Leo Blog module for PrestaShop
Medium
CVE-2023-41040
GitPython blind local file inclusion
Low
ghsa-j5g3-5c8r-7qfx
Prevent logging invalid header values
Critical
CVE-2023-40582
Command Injection Vulnerability in find-exec
High
CVE-2023-41039
Sandbox escape via various forms of "format".
Medium
CVE-2023-36811
Archive spoofing vulnerability in borgbackup
Unrated
drupal-contrib-2023-042
drupal/obfuscate_email - SA-CONTRIB-2023-042
Unrated
drupal-contrib-2023-041
drupal/unified_twig_ext - SA-CONTRIB-2023-041
Critical
CVE-2023-4490
WP Job Portal <= 2.0.5 - Unauthenticated SQL Injection
Medium
9945c85b-a97a-4ad0-9d0a-69faf157563a
Simple 301 Redirects <= 2.0.7 - Cross-Site Request Forgery via 'clicked'
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.