Low
CVE-2023-45105
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2023-45269
Simple SEO <= 2.0.25 - Cross-Site Request Forgery via multiple admin_post functions
Medium
CVE-2023-36820
io.micronaut.security:micronaut-security-oauth2 has invalid IdTokenClaimsValidator logic on aud
High
ghsa-4c29-gfrp-g6x9
CefSharp affected by libvpx's heap buffer overflow in vp8 encoding
High
ghsa-94vc-p8w7-5p49
Bundled libwebp in imagecodecs vulnerable
Medium
CVE-2023-4797
Newsletter Lite <= 4.9.2 - Authenticated (Admin+) Command Injection
Medium
CVE-2023-1259
Hotjar <= 1.0.15 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-4469
Profile Extra Fields by BestWebSoft <= 1.2.7 - Missing Authorization to Sensitive Information Exposure
Critical
CVE-2023-44024
Improper neutralization of SQL parameters in KnowBand - One Page Checkout, Social Login & Mailchimp module for PrestaShop
Critical
CVE-2023-40920
Improper neutralization of an SQL parameter in prixanconnect module for PrestaShop
Low
CVE-2023-44389
Zope management interface vulnerable to stored cross site scripting via the title property
Medium
CVE-2023-44390
HtmlSanitizer vulnerable to Cross-site Scripting in Foreign Content
Medium
CVE-2023-45023
TYPO3 extension femanager Broken Access Control vulnerability
High
CVE-2023-43804
`Cookie` HTTP header isn't stripped on cross-origin redirects
Unrated
drupal-contrib-2023-048
drupal/mail_login - SA-CONTRIB-2023-048
High
ghsa-mvrp-3cvx-c325
Zod denial of service vulnerability during email validation
High
CVE-2023-1584
Quarkus OIDC can leak both ID and access tokens
Medium
c5429fb1-7072-4a00-8fb3-48d4f876417f
Customer Reviews for WooCommerce <= 5.36.0 - Missing Authorization
Medium
CVE-2023-40002
Booster for WooCommerce <= 7.1.1 - Authenticated (Subscriber+) Information Disclosure via Shortcode
Medium
CVE-2023-51513
Geo Controller <= 8.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
ghsa-86q5-qcjc-7pv4
Presto JDBC Server-Side Request Forgery by nextUri
High
ghsa-xm7x-f3w2-4hjm
Presto JDBC Server-Side Request Forgery by redirect
High
CVE-2023-26151
Versions of the package asyncua before 0.9.96 are vulnerable to Denial of Service (DoS) such that an attacker can send a malformed packet and as a result, the server will enter into an infinite loop a
High
CVE-2023-26150
Versions of the package asyncua before 0.9.96 are vulnerable to Improper Authentication such that it is possible to access Address Space without encryption and authentication. **Note:** This issue i
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.