High
CVE-2023-27159
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,216
Reset filters
Medium
CVE-2023-28332
Moodle vulnerable to Cross-site Scripting when algebra filter enabled but not functional
Medium
CVE-2023-28438
Pimcore vulnerable to improper quoting of filters in Custom Reports
Critical
CVE-2023-28115
PHAR deserialization allowing remote code execution
Medium
CVE-2023-27577
Path Traversal Vulnerability in `LESS` Parser allows reading of sensitive server files
Medium
CVE-2023-25170
Possible CSRF token fixation (CWE-352)
High
CVE-2021-36396
Moodle vulnerable to Server-Side Request Forgery
High
CVE-2023-24814
TYPO3 is vulnerable to Cross-Site Scripting via frontend rendering
Medium
CVE-2018-25080
Cross-site Scripting in MobileDetect
Medium
CVE-2022-24895
Symfony vulnerable to Session Fixation of CSRF tokens
Medium
CVE-2016-15022
CImage Cross-site Scripting vulnerability
High
CVE-2021-41143
Fix for arbitrary file deletion in customer media allows for remote code execution
Critical
CVE-2021-26642
XpressEngine vulnerable to Unrestricted Upload of File with Dangerous Type
Medium
ghsa-m95x-m25c-w9mp
XML-RPC for PHP allows access to local files via malicious argument to the Client::send method
Medium
ghsa-7vcx-v65q-9wpg
XML-RPC for PHP's `Wrapper::buildClientWrapperCode` method allows code injection via malicious `$client` argument
Medium
CVE-2023-54395
PocketMine-MP vulnerable to denial-of-service by sending large modal form responses
High
CVE-2023-54396
PocketMine-MP has improperly handled dye colour IDs in banner NBT, leading to server crash
Critical
CVE-2017-20157
Ariadne Component Library vulnerable to Server-Side Request Forgery
High
CVE-2022-23556
CodeIgniter4 allows spoofing of IP address when using proxy
Medium
CVE-2022-23500
TYPO3 CMS vulnerable to Denial of Service in Page Error Handling
Medium
CVE-2022-34297
Yii2 Gii Cross-site Scripting vulnerability
High
CVE-2022-46157
Akeneo PIM Community Edition vulnerable to remote php code execution
High
ghsa-3fgr-xjr6-xqm8
code injection in phpxmlrpc/phpxmlrpc
Critical
CVE-2022-45152
Moodle blind Server-Side Request Forgery (SSRF) vulnerability in LTI provider library
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.