Medium
389277fd-e47e-42df-9305-61ceedbcfb29
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Critical
CVE-2023-27845
Improper neutralization of a SQL parameter in KerAwen Omnichannel Stocks module for PrestaShop
Medium
ghsa-qxh3-jgvh-x55j
Connect-CMS Privilege Escalation Vulnerability
High
CVE-2023-36827
ethyca-fides Webserver API Path Traversal vulnerability
High
CVE-2023-31999
@fastify/oauth2 vulnerable to Cross Site Request Forgery due to reused Oauth2 state
High
CVE-2023-34457
MechanicalSoup vulnerable to malicious web server reading arbitrary files on client using file input inside HTML form
Medium
CVE-2023-25399
A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in Py_FindObjects() function.
Critical
CVE-2023-36665
protobufjs Prototype Pollution vulnerability
Medium
CVE-2023-34150
Apache Any23 vulnerable to excessive memory usage
Medium
CVE-2023-33201
Bouncy Castle For Java LDAP injection vulnerability
Medium
CVE-2023-28773
Secondary Title <= 2.0.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-37394
WP Dummy Content Generator <= 2.3.0 - Missing Authorization
Medium
CVE-2023-2173
BadgeOS <= 3.7.1.6 - Authenticated (Subscriber+) Insecure Direct Object Reference to Arbitrary Post Deletion
Medium
CVE-2023-37386
Media Library Helper by Codexin <= 1.2.0 - Cross-Site Request Forgery via rate_the_plugin_action
Medium
CVE-2022-47169
Visibility Logic for Elementor <= 2.3.4 - Cross-Site Request Forgery via toggle_option
High
CVE-2022-46849
Coming Soon Page <= 1.5.9 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-37388
Simple Light Weight Social Share (Tweet, Like, Share and Linkedin) <= 2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-36690
WPLMS < 4.900 - Cross-Site Request Forgery
High
CVE-2023-3092
SMTP Mail <= 1.3.46 - Unauthenticated Stored Cross-Site Scripting via Email Subject
Medium
CVE-2023-29173
Product Category Tree <= 2.5 - Missing Authorization
High
CVE-2023-3088
WP Mail Log <= 1.1.1 - Unauthenticated Stored Cross-Site Scripting via Email
Medium
CVE-2023-2171
BadgeOS <= 3.7.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
72c04de6-78d2-4a45-834a-01ed879b528f
Visibility Logic for Elementor <= 2.3.4 - Missing Authorization via admin_post 'toggle_option'
Medium
CVE-2023-27621
Livestream Notice <= 1.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.