Medium
CVE-2023-30525
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2023-30523
Jenkins Report Portal Plugin allows users with Item/Extended Read permission to view tokens on Jenkins controller
Medium
CVE-2023-30522
Jenkins Fogbugz Plugin has missing permissions check
Medium
CVE-2023-30521
Jenkins Assembla merge request builder Plugin missing authentication to access endpoint
High
CVE-2023-30520
Jenkins Quay.io trigger Plugin Cross-site Scripting vulnerability
Medium
CVE-2023-30532
Lack of authentication mechanism in Jenkins TurboScript Plugin webhook
Medium
CVE-2023-30531
Jenkins Consul KV Builder Plugin stores HashiCorp Consul ACL Token unencrypted
Unrated
drupal-contrib-2023-013
drupal/protected_pages - SA-CONTRIB-2023-013
Medium
CVE-2023-1651
ChatBot <= 4.4.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via openai_settings_option_callback
Medium
d0cb4434-94c5-42a9-bd86-869058dcbf67
Forminator <= 1.22.1 - Missing Authorization on 'hubspot_support_request' AJAX function
Medium
CVE-2023-1649
AI ChatBot <= 4.4.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-1660
ChatBot <= 4.4.8 - Unauthenticated Stored Cross-Site Scripting in Admin Dashboard
Medium
CVE-2023-0769
hiWeb Migration Simple <= 2.0.0.1 - Reflected Cross-Site Scripting
Medium
CVE-2023-0824
UserPlus <= 2.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2023-0894
Pickup | Delivery | Dine-in date time <= 1.0.9 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
718e54f5-f040-42d6-958d-255d905615d5
Forminator <= 1.22.1 - Missing Authorization on 'load_recaptcha_preview' AJAX function
Medium
CVE-2023-0421
Cloud Manager <= 1.0 - Reflected Cross-Site Scripting
Critical
CVE-2023-1650
ChatBot <= 4.4.6 - Unauthenticated PHP Object Injection via Cookies
Medium
CVE-2023-1806
WP Inventory Manager <= 2.1.0.11 - Reflected Cross-Site Scripting via 'message'
Medium
2ef15cb1-b320-42d9-a2fd-afff2ec8a93b
Forminator <= 1.22.1 - Missing Authorization on 'load_hcaptcha_preview' AJAX function
High
CVE-2023-28260
.NET Remote Code Execution vulnerability
Critical
CVE-2023-26122
safe-eval vulnerable to Sandbox Bypass due to improper input sanitization
Critical
CVE-2023-26121
safe-eval vulnerable to Prototype Pollution via the safeEval function
Medium
CVE-2023-1917
PowerPress <= 10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.