Medium
CVE-2023-6934
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
High
ghsa-9wgg-m99q-hhfc
Expired tokens can be renewed without validating the account password
High
CVE-2023-50732
Velocity execution without script right through tree macro
High
CVE-2023-6730
Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36.
Critical
CVE-2019-25158
Pedroetb TTS-API OS Command Injection
Medium
CVE-2023-46104
Apache Superset uncontrolled resource consumption
High
CVE-2023-49734
Apache Superset incorrect write permissions vulnerability
Medium
CVE-2023-49736
Apache Superset SQL injection vulnerability
Medium
CVE-2023-49006
Phpsysinfo Cross Site Request Forgery (CSRF) vulnerability
High
CVE-2023-6940
mlflow Command Injection vulnerability
Medium
CVE-2014-125107
Corveda PHPSandbox Protection Mechanism Failure vulnerability
Medium
CVE-2023-50829
Loan Repayment Calculator and Application Form <= 2.9.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-47527
WP Edit Username <= 1.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Medium
CVE-2023-50835
Advanced Category Template <= 0.1 - Cross-Site Request Forgery
Medium
CVE-2023-50377
Simple Counter <= 1.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Medium
CVE-2023-50823
CSS & JavaScript Toolbox <= 11.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2023-7198
WP Dashboard Notes <= 1.0.10 - Insecure Direct Object References to Authenticated Private Note Deletion
Medium
CVE-2023-50832
Multi Step Form <= 1.7.16 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-50825
iframe Shortcode <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Medium
CVE-2023-47525
Event Management Tickets Booking <= 1.4.6 - Authenticated (Administrator+) Stored Cross-Site Scripting via settings
Medium
CVE-2023-50831
CURCY – Multi Currency for WooCommerce <= 2.2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-50830
Seos Contact Form <= 1.8.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-50833
Colibri Page Builder <= 1.0.240 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-50822
Currency Converter Widget <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.