High
CVE-2023-6558
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,515
Critical
CVE-2023-40921
Improper neutralization of a SQL parameter in deprecated soliberte module from Common Services for PrestaShop
Critical
CVE-2023-46989
Improper neutralization of SQL parameter in Innovadeluxe - Quick Order module for PrestaShop
Low
ghsa-w4x6-hh3x-wjrx
Stale copy of the public suffix list
High
CVE-2023-49803
Overly permissive origin policy
High
CVE-2023-49800
DOS by abusing `fetchOptions.retry`.
Medium
CVE-2023-49795
Server-Side Request Forgery in mindsdb
Medium
CVE-2023-6000
Popup Builder <= 4.2.2 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-6037
WP TripAdvisor Review Slider <= 11.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-5877
affiliate-toolkit <= 3.4.2 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2023-6624
Import and export users and customers <= 1.24.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
Critical
CVE-2023-6553
Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution
Medium
CVE-2022-48614
Cross-site Scripting in Semantic MediaWiki
High
CVE-2023-50449
Directory Traversal in JFinalCMS
Medium
CVE-2023-6654
PHPEMS Deserialization of Untrusted Data vulnerability
Medium
CVE-2023-6845
CommentTweets <= 0.6 - Cross-Site Request Forgery to Settings Update
High
CVE-2023-6394
Authorization bypass in Quarkus
High
CVE-2023-49797
Local Privilege Escalation in Windows
Medium
CVE-2023-51548
SlickNav Mobile Menu <= 1.9.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-46497
Directory Traversal in evershop
Critical
CVE-2023-46498
Code execution in evershop
Medium
CVE-2023-46499
Cross-site Scripting in evershop
High
CVE-2023-46496
Directory Traversal in evershop
Medium
CVE-2023-46495
Cross-site Scripting in evershop
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.