High
CVE-2023-28335
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2023-28334
Moodle may allow authenticated users to enumerate other user's names via learning plans page
Medium
CVE-2023-28336
Moodle may allow teachers to access the names of users they could not otherwise access
High
CVE-2023-1370
json-smart Uncontrolled Recursion vulnerability
Critical
CVE-2023-25655
baserCMS allows any file to be uploaded
Critical
CVE-2023-25654
baserCMS File Uploader Remote Code Execution (RCE) vulnerability
Medium
CVE-2023-28443
directus vulnerable to Insertion of Sensitive Information into Log File
High
CVE-2023-27094
Hippo4j privilege escalation issue
Critical
CVE-2023-26114
code-server vulnerable to Missing Origin Validation in WebSockets
Medium
d09a0b62-6556-4be5-a6f2-0cb0edcced3b
GiveWP <= 2.25.2 - Cross-Site Request Forgery via give_ajax_store_payment_note
Medium
a4572874-afd4-4e46-8a28-76a0a6cc8acb
Pagination by BestWebSoft < 1.2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
a2dc1a04-5503-412b-92e7-ed86910abd92
GiveWP <= 2.25.2 - Cross-Site Request Forgery via give_ajax_delete_payment_note
Medium
5ea02dd5-d837-471c-aa6a-264ffcedd55d
GiveWP <= 2.25.2 - Cross-Site Request Forgery
Critical
CVE-2023-28121
WooCommerce Payments 4.8.0 - 5.6.1 Authentication Bypass and Privilege Escalation
Medium
3adf6b20-110f-4057-9fab-5248e9c18555
Gallery by BestWebSoft – Customizable Image and Photo Galleries for WordPress <= 4.6.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
766
JoomGallery - SQL Injection
Critical
CVE-2023-27847
Improper neutralization of multiple SQL parameters in the xipblog module for PrestaShop
Medium
CVE-2023-0870
OpenNMS Meridian and Horizon vulnerable to Cross-Site Request Forgery
Medium
CVE-2023-28438
Pimcore vulnerable to improper quoting of filters in Custom Reports
Medium
CVE-2023-1578
Pimcore Remote Code Execution vulnerability in Search function
Medium
CVE-2023-28708
Apache Tomcat vulnerable to Unprotected Transport of Credentials
High
CVE-2023-1436
Jettison vulnerable to infinite recursion
Medium
CVE-2023-28665
Bulk Price Update for Woocommerce <= 2.2.1 - Reflected Cross-Site Scripting
Medium
CVE-2022-46812
Thank You Page Customizer for WooCommerce – Increase Your Sales <= 1.0.13 - Cross-Site Request Forgery via send_email
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.