High
CVE-2023-25164
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2023-0735
Cross-Site Request Forgery (CSRF) in wallabag/wallabag
Medium
CVE-2023-0736
Cross-site Scripting (XSS) in wallabag/wallabag
High
CVE-2022-4265
Replyable – Subscribe to Comments and Reply by Email <= 2.2.9 - Authenticated (Subscriber+) PHP Object Injection via prompt_dismiss_notice
Medium
CVE-2023-25447
ColorWay <= 4.2.3 - Cross Site Request Forgery
Medium
CVE-2023-0292
Quiz And Survey Master <= 8.0.8 - Cross-Site Request Forgery to Arbitrary Media Deletion
Medium
CVE-2022-45837
微信机器人高级版 <= 6.2.1 - Reflected Cross Site Scripting
High
CVE-2022-44580
Plugin for Google Reviews <= 2.2.3 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2022-47419
Mayan EDMS DMS XSS vulnerability
High
CVE-2023-25194
Apache Kafka Connect vulnerable to Deserialization of Untrusted Data
Medium
CVE-2023-23931
Cipher.update_into can corrupt memory if passed an immutable python object as the outbuf
Critical
CVE-2023-24813
URI validation failure on SVG parsing. Bypass of CVE-2023-23924
Medium
CVE-2023-0723
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery on ajax_move_object
Medium
CVE-2023-0711
Wicked Folders <= 2.18.16 - Missing Authorization via ajax_save_state
Medium
CVE-2023-0715
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_clone_folder
Medium
CVE-2023-0729
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_save_sort_order
Medium
CVE-2023-0719
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_save_sort_order
Medium
CVE-2023-0731
Interactive Geo Maps <= 1.5.9 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2023-0720
Wicked Folders <= 2.18.16 - Missing Authorization on ajax_save_folder_order
Medium
CVE-2022-46855
Responsive Pricing Table <= 5.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-1110
Yellow Yard Searchbar <= 2.7.27 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-0725
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_clone_folder
High
CVE-2022-47155
Slider by Supsystic <= 1.8.6 - Cross-Site Request Forgery
Medium
CVE-2023-0727
Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_delete_folder
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.