Medium
CVE-2023-32103
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2023-32108
Albo Pretorio Online <= 4.6.3 - Reflected Cross-Site Scripting
Medium
CVE-2023-32101
Library Viewer <= 2.0.6 - Open Redirect via 'redirect_to'
Medium
CVE-2023-31235
Participants Database <= 2.4.9 - Cross-Site Request Forgery via _process_general
Medium
a52015fe-c4df-46a6-8f23-b33730797f4c
Participants Database <= 2.4.9 - Authenticated(Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
a39ca182-981b-4636-acd5-4c8a269858dd
WOLF <= 1.0.6 - Cross-Site Request Forgery via wpbe_update_page_field
Medium
CVE-2023-30499
FV Flowplayer Video Player <= 7.5.32.7212 - Reflected Cross-Site Scripting via id
Medium
CVE-2023-32102
Library Viewer <= 2.0.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4676
OSM - OpenStreetMap <= 6.0.5 - Authenticated(Contributor+) Stored Cross-Site Scripting via 'osm_map' Shortcode
Medium
CVE-2023-32122
Spiffy Calendar <= 4.9.3 - Reflected Cross-Site Scripting via page parameter
Medium
CVE-2023-2490
UserAgent-Spy <= 1.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Critical
CVE-2023-2276
WCFM Membership – WooCommerce Memberships for Multivendor Marketplace <= 2.10.7 - Unauthenticated Insecure Direct Object Reference to Arbitrary User Password Change
Medium
CVE-2023-31218
WOLF <= 1.0.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via wpbe_update_page_field
Medium
CVE-2023-32105
WPPizza <= 3.17.1 - Reflected Cross-Site Scripting
Medium
CVE-2023-30943
Moodle External Control of File Name or Path vulnerability
High
CVE-2023-30944
Moodle SQL Injection vulnerability
Medium
CVE-2023-29918
RosarioSIS vulnerable to CSV Injection
High
CVE-2023-30861
Flask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie header
Medium
ghsa-g35x-j6jj-8g7j
@mittwald/kubernetes's secret contents leaked via debug logging
Medium
CVE-2023-30855
Pimcore Path Traversal Vulnerability in AdminBundle/Controller/Reports/CustomReportController.php
Critical
CVE-2023-2479
appium-desktop OS Command Injection vulnerability
High
CVE-2023-32007
** UNSUPPORTED WHEN ASSIGNED ** The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has
High
CVE-2023-2288
Otter - Gutenberg Blocks <= 2.2.5 - Authenticated (Author+) PHAR Deserialization
Medium
CVE-2023-1938
WP Fastest Cache <= 1.1.4 - Authenticated(Administrator+) Blind Server Side Request Forgery via check_url
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.