Medium
CVE-2023-0033
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2022-4765
Portfolio for Elementor <= 2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
462372ab-8f83-4b75-b3dd-674199e1eeee
Mailjet Email Marketing <= 5.3 - Authenticated (Admin+) Cross-Site Scripting
Medium
CVE-2022-4834
CPT Bootstrap Carousel <= 1.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2022-4663
Members Import <= 1.4.2 - Self Cross-Site Scripting
High
CVE-2022-47427
My Calendar <= 3.3.24.1 - Cross-Site Request Forgery
Medium
CVE-2022-4781
Accordion Shortcodes <= 2.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Critical
CVE-2015-10009
nterchange Code Injection vulnerability
High
CVE-2021-4299
string-kit Inefficient Regular Expression Complexity vulnerability
High
CVE-2022-4323
Google Analyticator <= 6.5.5 - Authenticated (Administrator+) PHP Object Injection
Medium
CVE-2022-4017
Booster (<= 6.0.0), Booster Plus (<= 6.0.0), and Booster Elite (<= 6.0.0) for WooCommerce - Cross-Site Request Forgery
Medium
CVE-2010-10002
SimpleSAMLphp simplesamlphp-module-openid
High
CVE-2018-25061
rgb2hex vulnerable to inefficient regular expression complexity
Critical
CVE-2017-20160
express-param vulnerable to Improper Handling of Extra Parameters
Medium
CVE-2017-20158
Yii2 FileAPI Widget vulnerable to Cross-site Scripting
Medium
CVE-2022-4868
Froxlor Improper Authorization vulnerability
Critical
CVE-2017-20157
Ariadne Component Library vulnerable to Server-Side Request Forgery
Medium
CVE-2022-4867
Froxlor vulnerable to Cross-Site Request Forgery
Medium
CVE-2022-4864
Froxlor vulnerable to Argument Injection
High
ghsa-q2fj-6h62-59m2
Apiman Vert.x Gateway has Transitive Hazelcast connection caching issue
High
CVE-2022-46178
Path Traversal In MeterSpere leads to upload file to any path
High
CVE-2022-40151
XStream can cause a Denial of Service by injecting deeply nested objects raising a stack overflow
Critical
CVE-2022-44621
Apache Kylin vulnerable to Command injection by Diagnosis Controller
High
CVE-2022-43396
Apache Kylin vulnerable to Command injection by Useless configuration
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.