Medium
CVE-2023-0095
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2022-4704
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Import
Medium
CVE-2022-4703
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Import Deletion
Medium
CVE-2022-4701
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Plugin Activation
Medium
CVE-2022-4707
Royal Elementor Addons <= 1.3.59 - Cross-Site Request Forgery to Menu Template creation
Medium
CVE-2022-4670
PDF.js Viewer <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4838
Clean Login <= 1.13.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4717
Strong Testimonials <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4577
Easy Testimonials <= 3.9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
130c3bbf-19a9-4e11-b6f2-5a08bbf7b123
Mega Main Menu <= 2.2.2 - Information Disclosure
Medium
CVE-2022-4705
Royal Elementor Addons <= 1.3.59 - Insufficient Access Control to Template Activation
Medium
CVE-2023-22477
mercurius has Uncaught Exception when using subscriptions
High
CVE-2023-54396
PocketMine-MP has improperly handled dye colour IDs in banner NBT, leading to server crash
Medium
CVE-2022-3145
@okta/oidc-middlewareOpen Redirect vulnerability
Medium
ghsa-q95j-488q-5q3p
Apiman Manager API affected by Jackson denial of service vulnerability
High
CVE-2023-22467
Luxon Inefficient Regular Expression Complexity vulnerability
High
CVE-2017-20165
debug Inefficient Regular Expression Complexity vulnerability
Medium
CVE-2022-46769
Apache Sling App CMS vulnerable to reflected Cross-site Scripting
Medium
CVE-2010-10004
Information Cards Module vulnerable to Cross-site Scripting
Critical
CVE-2022-25890
wifey vulnerable to Command Injection due to improper input sanitization
High
79ef7b33-ea6b-4cf2-bed4-8177927ab650
WPDating <= 7.4.1 - Arbitrary File Upload
Medium
CVE-2016-15015
Barzahlen Payment Module PHP SDK vulnerable to Observable Timing Discrepancy
Critical
CVE-2021-4308
WebPA SQL Injection vulnerability
Medium
CVE-2015-10030
SUKOHI Surpass Path Traversal vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.