High
CVE-2023-2315
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,216
Reset filters
High
CVE-2015-8371
Composer allows cache poisoning from other projects built on the same host
High
CVE-2023-54390
PocketMine-MP server crash with certain invalid JSON payloads in `LoginPacket` due to dependency vulnerability (again)
High
CVE-2023-54355
PocketMine-MP server crash due to incorrect EC curve used for LoginPacket identityPublicKey
High
CVE-2023-41879
Magento LTS's guest order "protect code" can be brute-forced too easily
Critical
CVE-2023-41330
Snappy PHAR deserialization vulnerability
High
CVE-2023-40033
Flarum vulnerable to LFI and Blind SSRF via Avatar upload
Medium
CVE-2023-39530
PrestaShop file deletion via CustomerMessage
Medium
CVE-2023-39529
PrestaShop file deletion via attachment API
Critical
CVE-2023-39528
Reading a file through path traversal & Remote Code Execution via unsafe deserialization
Critical
CVE-2023-29689
PyroCMS remote code execution vulnerability
Medium
CVE-2023-38708
Pimcore Path Traversal Vulnerability in AssetController:importServerFilesAction
Medium
CVE-2023-38490
XML External Entity (XXE) vulnerability in the XML data handler
Medium
CVE-2023-38491
Cross-site scripting (XSS) from MIME type auto-detection of uploaded files
Medium
CVE-2023-38492
Denial of service from unlimited password lengths
High
CVE-2023-37897
grav Server-side Template Injection (SSTI) mitigation bypass
High
CVE-2023-54392
PocketMine-MP vulnerable to server crash using badly formatted sign NBT in BlockActorDataPacket
Low
CVE-2023-37269
Winter CMS stored XSS through privileged upload of SVG file
High
CVE-2023-37260
league/oauth2-server key exposed in exception message when passing as a string and providing an invalid pass phrase
Medium
CVE-2023-23684
WPGraphQL <= 1.14.5 - Authenticated (Editor+) Server-Side Request Forgery
High
CVE-2023-35133
Moodle vulnerable to Server Side Request Forgery
High
CVE-2023-34448
Grav Server-side Template Injection (SSTI) via Twig Default Filters
High
CVE-2023-34253
Grav Server-side Template Injection (SSTI) via Denylist Bypass Vulnerability
High
CVE-2023-34252
Grav Server-side Template Injection (SSTI) via Twig Default Filters
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.