High
CVE-2023-0793
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,070
Reset filters
Medium
CVE-2023-0780
Improper Restriction of Rendered UI Layers or Frames in cockpit-hq/cockpit
Medium
CVE-2023-24230
Formwork Cross-site Scripting (XSS) from Page title field
Critical
CVE-2015-10077
SQL injection in webbuilders-group silverstripe-kapost-bridge
High
CVE-2023-0759
privilege chaining in cockpit-hq/cockpit
High
CVE-2023-24814
TYPO3 is vulnerable to Cross-Site Scripting via frontend rendering
Critical
CVE-2022-45982
Deserialization of Untrusted Data in thinkphp
Medium
CVE-2023-0735
Cross-Site Request Forgery (CSRF) in wallabag/wallabag
Medium
CVE-2023-0736
Cross-site Scripting (XSS) in wallabag/wallabag
Critical
CVE-2023-24813
URI validation failure on SVG parsing. Bypass of CVE-2023-23924
Critical
CVE-2015-10073
tinymighty WikiSEO is vulnerable to cross-site scripting via modifyHTML function
Medium
CVE-2017-20175
Cross-site Scripting in DaSchTour matomo-mediawiki-extension
Medium
CVE-2018-25080
Cross-site Scripting in MobileDetect
High
CVE-2023-0671
froxlor is vulnerable to privilege escalation from customer to root via directory-options
High
CVE-2023-23941
Payment information sent to PayPal not necessarily identical to created order
Medium
CVE-2021-37502
Cross site scripting in automad/automad
Medium
CVE-2023-0610
wallabag subject to Improper Authorization via annotations
Medium
CVE-2023-0609
wallabag contains Improper Authorization via export feature
Medium
CVE-2023-23937
Pimcore contains Unrestricted Upload of File with Dangerous Type
High
CVE-2023-25014
Broken Access Control in 3rd party TYPO3 extension "femanager"
High
CVE-2023-25013
Broken Access Control in 3rd party TYPO3 extension "femanager"
Critical
CVE-2023-25313
AVideo contains Command injection when embedding a video link
Medium
CVE-2022-24894
Symfony storing cookie headers in HttpCache
Medium
CVE-2022-24895
Symfony vulnerable to Session Fixation of CSRF tokens
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.