High
CVE-2023-2240
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2023-29019
Session fixation in fastify-passport
Medium
CVE-2023-29020
CSRF token fixation in fastify-passport
Critical
CVE-2023-29924
PowerJob vulnerable to incorrect access control
High
CVE-2023-30620
mindsdb arbitrary file write when extracting a remotely retrieved Tarball
Medium
ghsa-wjfc-pgfp-pv9c
Improper Input Validation in nyholm/psr7
Medium
ghsa-9jxr-mwpp-w643
Improper header validation in httpsoft/http-message
High
CVE-2023-30798
MultipartParser denial of service with too many fields or files
High
CVE-2023-2228
Cross-Site Request Forgery (CSRF) in GitHub repository modoboa/modoboa prior to 2.1.0.
Critical
CVE-2023-2227
Improper Authorization in GitHub repository modoboa/modoboa prior to 2.1.0.
Medium
CVE-2022-48150
Shopware vulnerable to cross-site scripting (XSS)
Medium
CVE-2023-2202
RosarioSIS improper access control vulnerability
Medium
CVE-2023-28174
eRocket <= 1.2.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
e5eea72d-f10b-460b-be00-bb5b1c4a1a62
Image Optimizer WD <= 1.0.26 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-28533
Cab Grid <= 1.5.15 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-30874
GPS Plotter <= 5.3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-27624
Redirect After Login <= 0.1.9 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
CVE-2023-27627
Woocommerce Email Report <= 2.4 - Unauthenticated Cross-Site Scripting
Medium
a5436d14-cbb5-420f-9f3a-698ce59c1e1e
Formilla Chat and Marketing Automation <= 1.0 - Authenticated (Administrator+) Cross-Site Scripting via 'FormillaToolsID'
Medium
CVE-2023-31071
Modal Dialog <= 3.5.14 - Reflected Cross-Site Scripting
Medium
59f7a1b2-f718-40e7-8030-b9212edf71b7
Formilla Edge <= 1.0 - Authenticated (Administrator+) Cross-Site Scripting via 'FormillaPluginID'
Medium
CVE-2023-28622
Easy Slider Revolution <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via esrcpt_slider_allow_iframes_filter
Medium
CVE-2023-30876
Dave's WordPress Live Search <= 4.8.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-23727
Formilla Live Chat <= 1.3.0 - Authenticated (Administrator+) Cross-Site Scripting via 'FormillaID'
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.