High
CVE-2023-49299
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
High
CVE-2023-50578
Mingsoft MCMS SQL injection
Medium
CVE-2023-50550
Layui cross-site scripting (XSS) vulnerability
Critical
CVE-2023-41544
JeecgBoot server-side template injection
Critical
CVE-2023-41542
Jeecg Boot SQL injection vulnerability
Critical
CVE-2023-41543
Jeecg Boot SQL Injection
High
CVE-2023-3629
Infinispan REST Server's cache retrieval endpoints do not properly evaluate the necessary admin permissions
High
CVE-2023-3628
Infinispan REST Server's bulk read endpoints do not properly evaluate user permissions
High
CVE-2023-7078
Miniflare vulnerable to Server-Side Request Forgery (SSRF)
Medium
CVE-2023-51663
Hail relies on OIDC email claims to verify the validity of a user's domain.
Medium
CVE-2023-50572
JLine vulnerable to out of memory error
High
CVE-2023-50571
easy-rules-mvel vulnerable to remote code execution
Critical
CVE-2023-7152
A vulnerability, which was classified as critical, has been found in MicroPython 1.21.0/1.22.0-preview. Affected by this issue is the function poll_set_add_fd of the file extmod/modselect.c. The manip
Medium
CVE-2023-7148
ShifuML shifu code injection vulnerability
Medium
CVE-2023-52176
Malware Scanner <= 4.7.1 - IP Spoofing
Medium
CVE-2023-52186
WooCommerce Product Vendors <= 2.2.2 - Missing Authorization
Medium
CVE-2023-52187
Image Source Control <= 2.17.0 - Sensitive Information Exposure via Log File
Medium
CVE-2023-52184
WP Job Portal <= 2.0.6 - Cross-Site Request Forgery
Critical
CVE-2023-52181
Theme per user <= 1.0.1 - Unauthenticated PHP Object Injection
Medium
CVE-2023-7170
RSVP Events <= 2.9.4 - Reflected Cross-Site Scripting
Medium
CVE-2023-52177
Integrate Google Drive <= 1.3.3 - Missing Authorization via save_settings
Medium
CVE-2023-52175
Auto Amazon Links <= 5.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-6384
WP User Profile Avatar <= 1.0.0 - Authenticated (Author+) Insecure Direct Object Reference to Avatar Deletion/Update
Medium
CVE-2023-52178
WP Affiliate Disclosure <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via $id
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.