Medium
CVE-2023-0958
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-3977
Inisev Plugins (Various Versions) - Cross-Site Request Forgery on handle_installation function
Medium
9d79ce22-33ef-4dfb-a842-591cd7cedc94
Web Accessibility By accessiBe <= 1.15 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-5798
Assistant <= 1.4.3 - Authenticated (Editor+) Server Side Request Forgery
Medium
CVE-2023-3604
Change WP Admin Login <= 1.1.3 - Protection Mechanism Failure to Login Page Disclosure
Medium
CVE-2023-36683
Schema Pro <= 2.7.8 - Authenticated(Contributor+) Missing Authorization
High
CVE-2023-3442
Missing authorization in Jenkins Plug-in for ServiceNow
Medium
CVE-2023-37692
Stored Cross-Site Scripting October CMS
Medium
CVE-2023-3414
Credential leakage in Jenkins Plug-in for ServiceNow
Unrated
drupal-contrib-2023-032
drupal/minifyhtml - SA-CONTRIB-2023-032
Unrated
drupal-contrib-2023-031
drupal/symfony_mailer - SA-CONTRIB-2023-031
Medium
CVE-2023-39152
Incorrect control flow in Jenkins Gradle Plugin breaks credentials masking in the build log
Medium
CVE-2023-39156
CSRF vulnerability in Bazaar Plugin
Low
CVE-2023-39155
Secret displayed without masking by Chef Identity Plugin
Medium
CVE-2023-39154
Incorrect permission checks in Qualys Web App Scanning Connector Plugin allow capturing credentials
High
CVE-2023-39151
Jenkins Stored Cross-site Scripting vulnerability
Medium
CVE-2023-39153
CSRF vulnerability in GitLab Authentication Plugin
Critical
CVE-2023-38673
Command injection in PaddlePaddle
Medium
CVE-2023-38672
Float point exception (FPE) in paddlepaddle
High
CVE-2023-38671
Heap buffer overflow in PaddlePaddle
Medium
CVE-2023-38670
Null pointer dereference in PaddlePaddle
High
CVE-2023-38669
Use after free in PaddlePaddle
Critical
CVE-2023-38647
Deserialization vulnerability in Helix workflow and REST
Medium
CVE-2023-39159
Woocommerce Blocker Lite <= 2.1.5 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.