High
CVE-2023-32679
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,071
Reset filters
Critical
CVE-2023-32692
Remote Code Execution Vulnerability in Validation Placeholders in CodeIgniter4
Medium
CVE-2023-2666
Froxlor vulnerable to Allocation of Resources Without Limits or Throttling
High
CVE-2023-2665
RosarioSIS Stores Sensitive Data in a Mechanism without Access Control
Medium
CVE-2023-30124
LavaLite vulnerable to Cross Site Scripting
Medium
CVE-2023-26044
ReactPHP's HTTP server continues parsing unused multipart parts after reaching input field and file upload limits
High
CVE-2023-2756
pimcore/customer-management-framework-bundle has SQL Injection vulnerability in Segment Assignment query
Medium
CVE-2023-2752
phpMyFAQ vulnerable to stored Cross-site Scripting
Medium
CVE-2023-2753
phpMyFAQ vulnerable to stored Cross-site Scripting
Medium
CVE-2021-27131
Moodle vulnerable to stored Cross-site Scripting
Medium
CVE-2023-2730
Pimcore Cross-site Scripting vulnerability
High
CVE-2023-32073
WWBN AVideo command injection vulnerability
High
CVE-2023-30130
CraftCMS allows remote attacker to execute arbitrary code via crafted script to Section parameter
Critical
CVE-2023-27238
LavaLite vulnerable to web cache poisoning
Medium
CVE-2023-27237
LavaLite CMS vulnerable to host header injection attack
Medium
CVE-2023-2630
Pimcore Cross-site Scripting (XSS) vulnerability in Admin Translations
High
CVE-2023-2629
Embedding untrusted input inside CSV files leads to Formula Injection/CSV Injection
Medium
CVE-2023-2616
Pimcore Cross-site Scripting (XSS) in Static Routes name field
Medium
CVE-2023-32075
Pimcore vulnerable to Business Logic Errors via Customer automation rules
Medium
CVE-2023-2614
Pimcore Cross-site Scripting (XSS) in name field of Custom Reports
Medium
CVE-2023-2615
Pimcore Cross-site Scripting (XSS) in Predefined Properties delete
Medium
ghsa-r3fg-3r88-6x3f
Ibexa User Settings are accessible on the front-end for anonymous user
High
CVE-2023-2591
teampass vulnerable to code injection
Medium
CVE-2023-31144
craftcms/cms vulnerable to cross site scripting in RSS feed widget
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.