Low
CVE-2023-52085
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,216
Reset filters
Low
CVE-2023-52083
Winter CMS Stored XSS through privileged upload of Media Manager file followed by renaming
Medium
CVE-2023-48652
Concrete CMS Cross Site Request Forgery (CSRF)
Low
CVE-2023-7037
Authenticated Blind SSRF in automad/automad
Medium
CVE-2023-50262
Denial of service caused by infinite recursion when parsing SVG images
Medium
CVE-2023-50251
Denial of service caused by infinite recursion when parsing SVG document
Medium
ghsa-7mc6-x925-7qvx
Test code in published microsoft-graph-beta package exposes phpinfo()
Medium
CVE-2023-49283
Test code in published microsoft-graph-core package exposes phpinfo()
Medium
CVE-2023-49282
Amelia 1.2.18 - 1.2.36 - Unauthenticated Sensitive Information Exposure
Critical
CVE-2023-6026
PHPMemcachedAdmin Path Traversal vulnerability
Medium
CVE-2023-46745
LibreNMS vulnerable to rate limiting bypass on login page
Medium
ghsa-w98g-5fmx-wm4x
pocketmine/raklib reliable-ordered queue size is unlimited, allowing a session to hog server memory
Medium
CVE-2023-48219
TinyMCE vulnerable to mutation Cross-site Scripting via special characters in unescaped text nodes
Medium
CVE-2023-47636
pimcore/admin-ui-classic-bundle Full Path Disclosure via re-export document
Medium
CVE-2023-5550
Moodle Code Injection vulnerability
Medium
CVE-2023-47109
PrestaShop blockreassurance BO User can remove any file from server when adding a and deleting a block
High
CVE-2023-46725
FoodCoopShop Server-Side Request Forgery vulnerability
High
CVE-2023-46245
Kimai (Authenticated) SSTI to RCE by Uploading a Malicious Twig File
Medium
CVE-2023-43648
baserCMS Directory Traversal vulnerability in Form submission data management Feature
Medium
CVE-2023-29009
baserCMS Cross-site Scripting Vulnerability in Favorites Feature
Critical
CVE-2023-43661
Cachet vulnerable to Authenticated Remote Code Execution
Medium
CVE-2023-26366
Magento Open Source allows Server-Side Request Forgery (SSRF)
High
CVE-2023-43655
Composer Remote Code Execution vulnerability via web-accessible composer.phar
High
CVE-2023-38877
Economizzer host header injection vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.