Critical
CVE-2023-29926
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Critical
CVE-2023-30547
vm2 Sandbox Escape vulnerability
High
CVE-2023-30542
GovernorCompatibilityBravo may trim proposal calldata
Low
CVE-2022-4942
eslint-detailed-reporter vulnerable to cross-site scripting
Low
CVE-2023-2191
AzuraCast/AzuraCast vulnerable to cross-site scripting
Medium
CVE-2023-30616
Form Block <= 1.0.1 - Cross-Site Request Forgery
Medium
CVE-2023-1011
ChatBot <= 4.4.4 - Unauthenticated Stored Cross-Site Scripting via Cross-Site Request Forgery
Medium
CVE-2023-23657
Mail Subscribe List <= 2.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via smlsubform shortcode
Medium
CVE-2023-0233
ActiveCampaign – Forms, Site Tracking, Live Chat <= 8.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-47136
Ninja Tables <= 4.3.4 - Cross-Site Request Forgery
Medium
CVE-2023-23720
Verified Reviews (Avis Vérifiés) <= 2.3.14 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-23709
WPJAM Basic <= 6.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-30868
CMS Tree Page View <= 1.6.7 - Reflected Cross-Site Scripting via 'post_type'
Critical
CVE-2023-26865
Improper neutralization of a SQL parameter in bdroppy module for PrestaShop
Critical
CVE-2023-22621
Strapi plugins vulnerable to Server-Side Template Injection and Remote Code Execution in the Users-Permissions Plugin
High
Exploited in attacks
CVE-2023-22894
Strapi leaking sensitive user information by filtering on private fields
Medium
CVE-2023-29922
PowerJob vulnerable to Incorrect Access Control via the create user/save interface.
Medium
CVE-2023-20862
Spring Security logout not clearing security context
High
CVE-2023-30797
Lemur subject to insecure random generation
Medium
CVE-2023-22893
Strapi does not verify the access or ID tokens issued during the OAuth flow
Critical
CVE-2023-29510
Code injection via unescaped translations in xwiki-platform
Medium
CVE-2023-26048
OutOfMemoryError for large multipart without filename in Eclipse Jetty
Critical
CVE-2023-31250
Drupal core - SA-CORE-2023-005
Medium
CVE-2023-29923
PowerJob vulnerable to Insecure Permissions
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.