Unrated
CVE-2023-23753
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Critical
CVE-2023-27032
Improper neutralization of SQL parameter in Idnovate - AdvancedPopupCreator module for PrestaShop
High
CVE-2023-1970
yuan1994 tpAdmin Unrestricted Upload of File with Dangerous Type vulnerability
Medium
CVE-2023-1971
yuan1994 tpAdmin vulnerable to Server-Side Request Forgery
Critical
CVE-2023-29215
Apache Linkis JDBC EngineConn has deserialization vulnerability
Critical
CVE-2023-29216
Apache Linkis DatasourceManager module has deserialization vulnerability
Medium
CVE-2023-26120
XXL-JOB vulnerable to Cross-site Scripting
Medium
CVE-2023-1125
Ruby Help Desk <= 1.3.3 - Missing Authorization to Arbitrary Ticket Modification
Medium
CVE-2023-1804
Product Catalog Feed by PixelYourSite <= 2.1.0 - Reflected Cross-Site Scripting via 'edit'
Medium
d7a02502-bc3c-4fd1-b6db-7b3c476c141f
Better Search <= 3.1.0 - Cross-Site Request Forgery
Medium
CVE-2023-1911
Blocksy Companion <= 1.8.81 - Authenticated(Subscriber+) Sensitive Information Exposure via blocksy_posts shortcode
Medium
CVE-2023-29097
a3 Portfolio <= 3.1.0 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2023-1809
Download Manager Pro <= 6.2.9 - Unauthenticated Information Disclosure
Medium
7c7f6ef2-6c50-4739-8844-0db7d9ffe7f7
MC Woocommerce Wishlist <= 1.5.4 - Cross-Site Request Forgery
Critical
CVE-2023-1730
SupportCandy <= 3.1.4 - Unauthenticated SQL Injection via parse_user_filters
Medium
CVE-2023-1861
Limit Login Attempts <= 1.7.1 - Authenticated(Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2023-1805
Product Catalog Feed by PixelYourSite <= 2.1.0 - Reflected Cross-Site Scripting via 'page'
Medium
0be21ac7-4f61-44fc-9ffc-ab65faa549f6
tencentcloud-cos <= 1.0.7 - Cross-Site Request Forgery
Critical
CVE-2023-29017
vm2 vulnerable to sandbox escape
High
CVE-2023-29008
SvelteKit framework has Insufficient CSRF protection for CORS requests
Medium
CVE-2023-29014
Goobi viewer Core Reflected Cross-Site Scripting Vulnerability Using LOGID Parameter
Medium
CVE-2023-29015
Goobi viewer Core has Cross-Site Scripting Vulnerability in User Comments
Medium
CVE-2023-29016
Goobi viewer Core has Cross-Site Scripting Vulnerability in User Nicknames
High
CVE-2023-28707
Apache Airflow Drill Provider vulnerable to improper input validation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.