Medium
CVE-2023-6889
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2023-6890
phpMyFAQ Cross-site Scripting vulnerability
High
CVE-2023-50728
Unauthenticated Denial of Service in the octokit/webhooks library
Critical
CVE-2023-50723
Remote code execution/programming rights with configuration section from any user account
Critical
CVE-2023-50722
XSS/CSRF Remote Code Execution in XWiki.ConfigurableClass
Critical
CVE-2023-50721
Remote code execution from account through SearchAdmin
Medium
CVE-2023-50720
Solr search discloses email addresses of users
High
CVE-2023-50719
Solr search discloses password hashes of all users
Medium
CVE-2023-6598
SpeedyCache <= 1.1.3 - Missing Authorization to Plugin Options Update
Medium
CVE-2023-5432
Jquery news ticker <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-6635
EditorsKit <= 1.40.3 - Authenticated (Administrator+) Arbitrary File Upload
Medium
CVE-2023-5413
Image horizontal reel scroll slideshow <= 13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Critical
CVE-2023-49898
Apache StreamPark: Authenticated system users could trigger remote command execution
Medium
CVE-2023-30867
Apache StreamPark: Authenticated system users could trigger SQL injection vulnerability
High
CVE-2023-6837
Multiple WSO2 products vulnerable to perform user impersonatoin using JIT provisioning
Medium
CVE-2023-6835
WSO2 API Manager allows attackers to change the API rating
Medium
CVE-2023-6836
WSO2 products vulnerable to XML External Entity attack
Critical
CVE-2023-29234
Bypass serialize checks in Apache Dubbo
Critical
CVE-2023-46279
Apache Dubbo: Bypass deny serialize list check in Apache Dubbo
High
CVE-2023-6831
Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2.
Medium
CVE-2023-6832
Business Logic Errors in microweber/microweber
Critical
ghsa-cfxh-frx4-9gjg
Cross-site Scripting in @spscommerce/ds-react
Medium
CVE-2023-50710
Named path parameters can be overridden in TrieRouter
Medium
CVE-2023-6638
GTG Product Feed for Shopping <= 1.2.4 - Missing Authorization to Unauthenticated Plugin Settings Update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.