Medium
CVE-2023-4455
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-40178
@node-saml/node-saml's validatePostRequestAsync does not include checkTimestampsValidityError
Critical
CVE-2023-40177
XWiki Platform privilege escalation (PR) from account through AWM content fields
Medium
CVE-2023-40176
XWiki Platform Stored Cross-site Scripting in the user profile via the timezone displayer
High
CVE-2023-40035
Craft CMS vulnerable to Remote Code Execution via validatePath bypass
High
CVE-2023-39106
Nacos Spring vulnerable to Unsafe Deserialization
High
CVE-2022-46751
Apache Ivy External Entity Reference vulnerability
Medium
CVE-2023-40674
Simple URLs <= 118 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2023-4278
MasterStudy LMS <= 3.0.17 - Privilege Escalation
Medium
CVE-2023-4631
DoLogin Security <= 3.6 - IP Address Spoofing
Medium
CVE-2023-4307
Lock User Account <= 1.0.3 - Cross-Site Request Forgery to Account Lock/Unlock
Medium
CVE-2023-4318
Herd Effects <= 5.2.3 - Cross-Site Request Forgery to Effect Deletion
Medium
CVE-2023-40673
Cartpauj Register Captcha <= 1.0.02 - CAPTCHA Bypass
Medium
CVE-2023-41849
Posts Like Dislike <= 1.1.1 - Missing Authorization to Authenticated (Subscriber+) Plugin Setting Reset
High
CVE-2023-4294
URL Shortify <= 1.7.5 - Unauthenticated Stored Cross-Site Scripting via Referrer Header
Medium
CVE-2023-40665
Save as Image plugin by Pdfcrowd <= 2.16.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Medium
CVE-2023-4060
WP Adminify <= 3.1.5 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-4022
Herd Effects <= 5.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-40672
Sticky Social Media Icons <= 2.0 - Missing Authorization via ajax_request_handle
Medium
CVE-2023-40667
Simple URLs <= 117 - Reflected Cross-Site Scripting via 'post_id'
Medium
CVE-2023-40668
Save as PDF plugin by Pdfcrowd <= 2.16.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via admin settings
Medium
CVE-2023-4270
Min Max Control <= 4.5 - Reflected Cross-Site Scripting
Medium
CVE-2023-40604
Cookies by JM <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-40671
DX-auto-save-images <= 1.4.0 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.