Medium
CVE-2023-5809
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,540
Medium
CVE-2023-47758
Multi Step Form <= 1.7.12 - Cross-Site Request Forgery
Medium
CVE-2023-4603
Star CloudPRNT for WooCommerce <= 2.0.3 - Reflected Cross-Site Scripting
Medium
CVE-2023-5141
BSK Contact Form 7 Blacklist <= 1.0.1 - Reflected Cross-Site Scripting
Medium
CVE-2023-47764
Ditty <= 3.1.24 - Missing Authorization via save_ditty_permissions_check
High
CVE-2023-47129
Statamic CMS remote code execution via front-end form uploads
Medium
CVE-2023-46735
Symfony potential Cross-site Scripting in WebhookController
Medium
CVE-2023-46734
Symfony potential Cross-site Scripting vulnerabilities in CodeExtension filters
Medium
CVE-2023-46733
Symfony possible session fixation vulnerability
Medium
CVE-2023-47037
We failed to apply CVE-2023-40611 in 2.7.1 and this vulnerability was marked as fixed then.
High
CVE-2023-42781
Apache Airflow, versions before 2.7.3, has a vulnerability that allows an authorized user who has access to read specific DAGs only, to read information about task instances in other DAGs. This is a
Critical
CVE-2023-47128
piccolo SQL Injection via named transaction savepoints
Critical
CVE-2023-6069
Froxlor Improper Input Validation vulnerability
Medium
CVE-2023-5741
POWR <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-5662
Sponsors <= 3.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-5742
EasyRotator for WordPress <= 1.0.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Critical
CVE-2023-5952
Welcart e-Commerce <= 2.9.4 - Unauthenticated PHP Object Injection
Medium
CVE-2023-5951
Welcart e-Commerce <= 2.9.4 - Reflected Cross-Site Scripting
Medium
CVE-2023-46729
Sentry Next.js vulnerable to SSRF via Next.js SDK tunnel endpoint
Medium
CVE-2023-5545
Moodle Exposure of Sensitive Information to an Unauthorized Actor vulnerability
Medium
CVE-2023-5548
Moodle Acceptance of Extraneous Untrusted Data With Trusted Data vulnerability
Medium
CVE-2023-5549
Moodle Improper Access Control vulnerability
Medium
CVE-2023-5544
Moodle Cross-site Scripting vulnerability
Medium
CVE-2023-5547
Moodle Cross-site Scripting vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.