High
CVE-2023-33779
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,596
High
CVE-2023-20883
Spring Boot Welcome Page Denial of Service
Medium
CVE-2023-2817
Stored cross site scripting in Craft CMS
Medium
CVE-2023-32681
Unintended leak of Proxy-Authorization header in requests
Medium
CVE-2023-32323
Synapse Outgoing federation to specific hosts can be disabled by sending malicious invites
High
CVE-2022-39374
Synapse Denial of service due to incorrect application of event authorization rules during state resolution
High
CVE-2022-39335
Synapse does not apply enough checks to servers requesting auth events of events in a room
Medium
CVE-2023-33197
Craft CMS stored XSS in indexedVolumes
Medium
CVE-2023-33196
Craft CMS stored XSS in review volume
Medium
CVE-2023-33195
Craft CMS XSS in RSS widget feed
Low
CVE-2023-33194
CraftCMS stored XSS in Quick Post widget error message
Medium
CVE-2023-33187
html inputs of type password recorded in plaintext when converted to text inputs
Critical
CVE-2023-2278
WP Directory Kit <= 1.1.9 - Unauthenticated Local File Inclusion via wdk_public_action
Medium
CVE-2023-0489
SlideOnline <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2023-2492
QueryWall <= 1.1.1 - Authenticated (Administrator+) SQL Injection
Medium
CVE-2023-2881
Pimcore customers' list user password hash is disclosed
High
CVE-2023-2798
Unrestricted recursion in htmlunit
Medium
CVE-2023-28370
Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user acce
Medium
CVE-2022-46907
Apache JSPWiki vulnerable to cross-site scripting on several plugins
Medium
CVE-2023-30753
IP Metaboxes <= 2.1.1 - Reflected Cross-Site Scripting
Medium
CVE-2022-45372
Product Gallery Slider for WooCommerce <= 2.2.8 - Cross-Site Request Forgery
Medium
CVE-2023-25443
Button Generator – easily Button Builder <= 2.3.5 - Cross-Site Request Forgery in tools-data-base.php
Medium
CVE-2022-33974
Custom Twitter Feeds (Tweets Widget) <= 1.8.4 - Cross-Site Request Forgery
Medium
CVE-2023-2811
AI ChatBot <= 4.5.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.