High
CVE-2023-41130
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-4520
FV Flowplayer Video Player <= 7.5.37.7212 - Insufficient Input Validation to Unauthenticated Stored Cross-Site Scripting and Arbitrary Usermeta Update
Medium
CVE-2023-41133
Secure Admin IP <= 2.0 - Missing Authorization via 'saveSettings'
Critical
CVE-2023-39652
Improper neutralization of SQL parameter in Theme Volty Video Tab module for PrestaShop
Critical
CVE-2023-39650
Improper neutralization of SQL parameters in Theme Volty CMS Blog module for PrestaShop
Critical
CVE-2023-40573
XWiki Platform's Groovy jobs check the wrong author, allowing remote code execution
High
CVE-2023-40572
XWiki Platform vulnerable to CSRF privilege escalation/RCE via the create action
Medium
ghsa-jxcx-3h54-qqxx
SilverStripe CMS Cross-site Scripting vulnerabilities inherited from TinyMCE
Medium
CVE-2023-39441
Apache Airflow missing Certificate Validation
High
CVE-2023-37379
Apache Airflow, in versions prior to 2.7.0, contains a security vulnerability that can be exploited by an authenticated user possessing Connection edit privileges. This vulnerability allows the user t
High
CVE-2023-40273
The session fixation vulnerability allowed the authenticated user to continue accessing Airflow webserver even after the password of the user has been reset by the admin - up until the expiry of the s
Unrated
drupal-contrib-2023-040
drupal/datafield - SA-CONTRIB-2023-040
Unrated
drupal-contrib-2023-039
drupal/safedelete - SA-CONTRIB-2023-039
Unrated
drupal-contrib-2023-038
drupal/shorthand - SA-CONTRIB-2023-038
Unrated
drupal-contrib-2023-037
drupal/config_pages - SA-CONTRIB-2023-037
Unrated
drupal-contrib-2023-035
drupal/forum_access - SA-CONTRIB-2023-035
Unrated
drupal-contrib-2023-034
drupal/acl - SA-CONTRIB-2023-034
High
CVE-2022-25024
The json2xml package through 3.12.0 for Python allows an error in typecode decoding enabling a remote attack that can lead to an exception, causing a denial of service.
Medium
CVE-2023-41100
hCaptcha for EXT:form Broken Access Control vulnerability
Medium
CVE-2023-2995
Leyka <= 3.30.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-39993
Elements kit Elementor addons <= 2.9.1 - Missing Authorization
Medium
0c6bc786-341a-4ab6-b86e-d21bb3dbf298
WP VK-付费内容插件 <= 1.3.3 - Cross-Site Request Forgery via AJAX actions
Critical
CVE-2023-36281
An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via the via the a json file to the load_prompt parameter.
High
CVE-2023-39141
webui-aria2 Path Traversal vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.