Medium
CVE-2023-28673
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
High
CVE-2023-28670
Jenkins Pipeline Aggregator View Plugin vulnerable to Cross-site Scripting
High
CVE-2023-28683
Jenkins Phabricator Differential Plugin vulnerable to XML external entity (XXE) attacks
High
CVE-2023-28684
Jenkins remote-jobs-view-plugin vulnerable to XML external entity attacks
High
CVE-2023-28682
Jenkins Performance Publisher Plugin vulnerable to XML external entity (XXE) attacks
High
CVE-2023-27025
RuoYi vulnerable to arbitrary file download
Medium
CVE-2023-23719
Premmerce <= 1.3.18 - Cross-Site Request Forgery via runAction
Medium
CVE-2023-1789
Firefly III vulnerable to improper input validation
Medium
CVE-2023-1404
Weaver Show Posts <= 1.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via Display Name
High
ghsa-5x5q-8cgm-2hjq
Karate has vulnerable dependency on json-smart package (CVE-2023-1370)
Critical
CVE-2023-29141
X-Forwarded-For header allows brute-forcing autoblocked IP addresses
High
CVE-2023-27159
Appwrite Server-Side Request Forgery vulnerability
Critical
CVE-2023-27162
OpenAPI Generator vulnerable to Server-Side Request Forgery
Critical
CVE-2023-1784
jeecg-boot vulnerable to improper authentication
High
CVE-2022-4899
zstd vulnerable to buffer overrun
Medium
CVE-2023-1701
Pimcore vulnerable to Reflected XSS in Predefined Properties module in Settings
Medium
CVE-2023-1702
Pimcore Cross-site Scripting in Predefined Asset Metadata module in Settings
Medium
CVE-2023-1704
pimcore is vulnerable to cross-site scripting in translate module
Medium
CVE-2023-1760
phpMyFAQ Stored Cross-site Scripting vulnerability
Medium
CVE-2023-1759
phpMyFAQ Stored Cross-site Scripting vulnerability
Medium
CVE-2023-1755
phpMyFAQ Cross-site Scripting vulnerability
Medium
CVE-2023-1754
phpMyFAQ vulnerable to improper input validation
Medium
CVE-2023-1753
phpMyFAQ has weak password requirements
High
CVE-2023-1762
thorsten/phpmyfaq vulnerable privilege escalation from improper privilege management
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.