Unrated
drupal-contrib-2023-048
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,404
Reset filters
Medium
ghsa-56fm-hfp3-x3w3
Wallabag user can disable 2FA unintentionally
Medium
CVE-2023-5318
Microweber uses hard coded credentials
Medium
CVE-2023-38873
Economizzer vulnerable to Clickjacking
Medium
CVE-2023-38871
Economizzer user enumeration vulnerability
Medium
CVE-2023-5244
Microweber Cross-site Scripting vulnerability
Unrated
drupal-contrib-2023-047
drupal/content_moderation_notifications - SA-CONTRIB-2023-047
Medium
CVE-2023-42817
pimcore/admin-ui-classic-bundle Cross-site Scripting vulnerability in Translations
High
CVE-2015-8371
Composer allows cache poisoning from other projects built on the same host
Critical
CVE-2023-5256
Drupal core - SA-CORE-2023-006
High
CVE-2023-38887
File Upload vulnerability in Dolibarr ERP CRM
Critical
CVE-2023-38888
Cross Site Scripting vulnerability in Dolibarr ERP CRM
Medium
CVE-2023-37611
Neos CMS Cross Site Scripting vulnerability
Medium
CVE-2023-41592
Froala Editor Cross-site Scripting vulnerability
High
CVE-2023-54390
PocketMine-MP server crash with certain invalid JSON payloads in `LoginPacket` due to dependency vulnerability (again)
High
CVE-2023-54355
PocketMine-MP server crash due to incorrect EC curve used for LoginPacket identityPublicKey
Unrated
drupal-contrib-2023-045
drupal/mail_login - SA-CONTRIB-2023-045
High
CVE-2023-41879
Magento LTS's guest order "protect code" can be brute-forced too easily
Medium
CVE-2023-41336
Prevent injection of invalid entity ids for "autocomplete" fields
Critical
CVE-2023-41330
Snappy PHAR deserialization vulnerability
Unrated
drupal-contrib-2023-044
drupal/webprofiler - SA-CONTRIB-2023-044
Critical
CVE-2021-36036
Magento improper access control vulnerability within Magento's Media Gallery Upload workflow
Unrated
drupal-contrib-2023-042
drupal/obfuscate_email - SA-CONTRIB-2023-042
Unrated
drupal-contrib-2023-041
drupal/unified_twig_ext - SA-CONTRIB-2023-041
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.