Medium
CVE-2023-50855
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Critical
CVE-2023-50839
JS Help Desk <= 2.8.1 - Unauthenticated SQL Injection via email and trackingid
Medium
CVE-2023-50851
Simply Schedule Appointments <= 1.6.5.27 - Authenticated(Administrator+) SQL Injection
High
CVE-2023-51500
Uncode Core <= 2.8.8 - Authenticated (Subscriber+) Arbitrary File Deletion
Medium
CVE-2023-50838
NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.5.5 - Authenticated (Admin+) SQL Injection
Medium
CVE-2023-50844
Mail logging – WP Mail Catcher <= 2.1.3 - Authenticated(Administrator+) SQL Injection
Medium
CVE-2023-50848
404 Solution <= 2.34.0 - Authenticated(Administrator+) SQL Injection
Medium
CVE-2023-50849
E2Pdf <= 1.20.23 - Authenticated(Administrator+) SQL Injection
Medium
CVE-2023-6855
Paid Memberships Pro <= 2.12.5 - Missing Authorization via API
Medium
CVE-2023-6941
Keap Official Opt-in Forms <= 1.0.11 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-50836
HTML Forms <= 1.3.28 - Authenticated (Administrator+) Cross-Site Scripting
Medium
CVE-2023-6924
Photo Gallery by 10Web <= 1.8.18 - Authenticated (Administrator+) Stored Cross-Site Scripting via Widget
Medium
CVE-2023-6991
JSM file_get_contents() Shortcode <= 2.7.0 - Authenticated (Contributor+) Server-Side Request Forgery via Shortcode
Medium
CVE-2023-4925
Easy Forms for Mailchimp <= 6.8.10 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-50843
Clockwork SMS Notfications <= 3.0.4 - Authenticated(Administrator+) SQL Injection
Medium
CVE-2023-46131
Grails data binding causes JVM crash and/or other denial of service
High
CVE-2023-7018
Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36.
Unrated
drupal-contrib-2023-055
drupal/dvf - SA-CONTRIB-2023-055
High
CVE-2023-37544
Apache Pulsar WebSocket Proxy contains an Improper Authentication vulnerability
High
CVE-2023-6976
MLflow Path Traversal Vulnerability
High
CVE-2023-6977
MLflow Local File Disclosure Vulnerability
Critical
CVE-2023-6974
MLflow Server-Side Request Forgery (SSRF)
Critical
CVE-2023-6975
MLFlow Path Traversal Vulnerability
High
CVE-2023-6909
Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.