Medium
CVE-2023-44760
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 400
Reset filters
Critical
CVE-2023-5256
Drupal core - SA-CORE-2023-006
Critical
CVE-2023-41330
Snappy PHAR deserialization vulnerability
Unrated
drupal-contrib-2023-033
drupal/matomo - SA-CONTRIB-2023-033
High
CVE-2023-38489
Insufficient Session Expiration after a password change
High
CVE-2023-37897
grav Server-side Template Injection (SSTI) mitigation bypass
High
CVE-2023-54392
PocketMine-MP vulnerable to server crash using badly formatted sign NBT in BlockActorDataPacket
High
CVE-2018-1000888
Archive_Tar contains Potential RCE if filename starts with phar://
High
CVE-2023-34448
Grav Server-side Template Injection (SSTI) via Twig Default Filters
High
CVE-2023-34253
Grav Server-side Template Injection (SSTI) via Denylist Bypass Vulnerability
High
CVE-2023-34252
Grav Server-side Template Injection (SSTI) via Twig Default Filters
Critical
CVE-2023-28115
PHAR deserialization allowing remote code execution
Medium
CVE-2022-24894
Symfony storing cookie headers in HttpCache
High
CVE-2023-22487
Flarum post mentions can be used to read any post on the forum without access control
Medium
CVE-2018-25050
Harvest Chosen vulnerable to Cross-site Scripting
Critical
CVE-2021-4262
laravel-jqgrid vulnerable to SQL Injection
Medium
CVE-2022-39315
Kirby CMS vulnerable to user enumeration in the brute force protection
Medium
CVE-2022-35651
Moodle Stored XSS and blind SSRF possible via SCORM track details
High
CVE-2022-34867
WP Libre Form 2 <= 2.0.8 - Sensitive Information Disclosure
Medium
CVE-2022-33155
Cross site scripting in ameos_tarteaucitron
Critical
CVE-2022-33107
Deserialization of Untrusted Data in topthink/framework
Medium
CVE-2022-31047
Insertion of Sensitive Information into Log File in typo3/cms-core
Critical
CVE-2022-25772
Cross-site Scripting vulnerability in Mautic's tracking pixel functionality
Critical
CVE-2020-21809
NukeViet SQL Injection vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.