Medium
CVE-2020-20697
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,404
Reset filters
High
CVE-2023-34448
Grav Server-side Template Injection (SSTI) via Twig Default Filters
High
CVE-2023-34253
Grav Server-side Template Injection (SSTI) via Denylist Bypass Vulnerability
High
CVE-2023-34252
Grav Server-side Template Injection (SSTI) via Twig Default Filters
Critical
CVE-2023-34251
Grav Server Side Template Injection (SSTI) vulnerability
Low
CVE-2023-29293
Magento Open Source affected by Improper Input Validation
Medium
CVE-2023-2984
Pimcore vulnerable to Pre-Auth Path Traversal in pimcore_log parameter
High
CVE-2023-7332
PocketMine-MP vulnerable to improperly checked dropped item count leading to server crash
High
CVE-2023-54393
PocketMine-MP vulnerable to server crash with certain invalid JSON payloads in `LoginPacket` due to vulnerable dependency
Medium
CVE-2023-33196
Craft CMS stored XSS in review volume
Medium
CVE-2023-33195
Craft CMS XSS in RSS widget feed
Low
CVE-2023-33194
CraftCMS stored XSS in Quick Post widget error message
Medium
CVE-2023-2881
Pimcore customers' list user password hash is disclosed
High
CVE-2023-2859
Code injection in nilsteampassnet/teampass
High
CVE-2023-32679
Craft CMS vulnerable to Remote Code Execution via unrestricted file extension
Critical
CVE-2023-32692
Remote Code Execution Vulnerability in Validation Placeholders in CodeIgniter4
High
CVE-2023-2665
RosarioSIS Stores Sensitive Data in a Mechanism without Access Control
Medium
CVE-2023-26044
ReactPHP's HTTP server continues parsing unused multipart parts after reaching input field and file upload limits
High
CVE-2023-2756
pimcore/customer-management-framework-bundle has SQL Injection vulnerability in Segment Assignment query
High
CVE-2023-32073
WWBN AVideo command injection vulnerability
High
CVE-2023-2629
Embedding untrusted input inside CSV files leads to Formula Injection/CSV Injection
Medium
CVE-2023-2616
Pimcore Cross-site Scripting (XSS) in Static Routes name field
Medium
CVE-2023-2614
Pimcore Cross-site Scripting (XSS) in name field of Custom Reports
Medium
CVE-2023-2615
Pimcore Cross-site Scripting (XSS) in Predefined Properties delete
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.