Medium
CVE-2023-44986
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
39003835-80df-49c7-982a-346bf328565c
WPGetAPI 2.1.0 - 2.2.1 - Authenticated (Subscriber+) Arbitrary Options Update
Medium
CVE-2023-44987
Timely Booking Button <= 2.0.2 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-5323
Dolibarr Cross-site Scripting vulnerability
Medium
CVE-2023-5318
Microweber uses hard coded credentials
High
CVE-2023-5319
phpMyFAQ Cross-site Scripting vulnerability
Critical
CVE-2023-5320
phpMyFAQ Cross-site Scripting vulnerability
Critical
CVE-2023-5316
phpMyFAQ Cross-site Scripting vulnerability
Medium
CVE-2023-5227
phpMyFAQ allows unrestricted file types in image field
Medium
CVE-2023-5317
phpMyFaq Cross-site Scripting vulnerability
Medium
CVE-2023-44270
PostCSS line return parsing error
Unrated
pysec-2023-182
opencv-contrib-python-headless versions before v4.8.1.78 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863. opencv-contrib-python-headless v4.8.1.78 upgrades the bundled libwebp
Unrated
pysec-2023-181
opencv-contrib-python versions before v4.8.1.78 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863. opencv-contrib-python v4.8.1.78 upgrades the bundled libwebp binary to v1.3.2.
Unrated
pysec-2023-183
opencv-python versions before v4.8.1.78 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863. opencv-python v4.8.1.78 upgrades the bundled libwebp binary to v1.3.2.
Unrated
pysec-2023-184
opencv-python-headless versions before v4.8.1.78 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863. opencv-python-headless v4.8.1.78 upgrades the bundled libwebp binary to v1.3.2
High
CVE-2023-43655
Composer Remote Code Execution vulnerability via web-accessible composer.phar
High
CVE-2023-39410
Apache Avro Java SDK vulnerable to Improper Input Validation
High
CVE-2023-5289
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.4.
Medium
CVE-2023-44246
Shockingly Simple Favicon <= 1.8.2 - Cross-Site Request Forgery
Medium
CVE-2023-44237
WP Site Protector <= 2.0 - Cross-Site Request Forgery
Medium
CVE-2023-44240
Timthumb Vulnerability Scanner <= 1.54 - Cross-Site Request Forgery
Medium
CVE-2023-5292
Advanced Custom Fields: Extended <= 0.8.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-44245
Contractor Contact Form Website to Workflow Tool <= 4.0.0 - Reflected Cross-Site Scripting
Medium
CVE-2023-44233
FooGallery <= 2.2.44 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.