Medium
CVE-2023-44984
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Critical
CVE-2023-43980
Improper neutralization of SQL parameter in Presto Changeo - Test Site Creator module for PrestaShop
High
ghsa-7vpr-3ppw-qrpj
Imageflow affected by libwebp zero-day and should not be used with malicious source images.
High
ghsa-4vjr-crvh-383h
@napi-rs/image affected by libwebp CVE
High
CVE-2023-43646
Chaijs/get-func-name vulnerable to ReDoS
Unrated
drupal-contrib-2023-047
drupal/content_moderation_notifications - SA-CONTRIB-2023-047
Medium
CVE-2023-5192
Pimcore Demo Allows GraphQL Introspection
Medium
CVE-2023-43828
Subrion CMS Cross-site Scripting vulnerability in /panel/languages
Medium
CVE-2023-43830
Subrion CMS XSS in /panel/configuration/financial/
High
CVE-2023-3223
Undertow vulnerable to denial of service
High
CVE-2023-2315
OpenCart Path Traversal vulnerability
Medium
CVE-2023-42460
Vyper's `_abi_decode` input not validated in complex expressions
Medium
CVE-2023-42453
matrix-synapse vulnerable to improper validation of receipts allows forged read receipts
Low
CVE-2023-41335
matrix-synapse vulnerable to temporary storage of plaintext passwords during password changes
Medium
CVE-2023-44257
Mang Board WP <= 1.8.1 - Cross-Site Request Forgery
Medium
CVE-2023-5231
Magic Action Box <= 2.17.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-44259
Mediavine Control Panel <= 2.10.2 - Cross-Site Request Forgery via render_settings_page
Medium
CVE-2023-5233
Font Awesome Integration <= 5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-5230
TM WooCommerce Compare & Wishlist <= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-44260
Woocommerce ESTO <= 2.23.1 - Cross-Site Request Forgery via saveSetting
Medium
CVE-2023-44258
Schema App Structured Data <= 1.22.3 - Missing Authorization via page_init
Medium
CVE-2023-44261
Block Plugin Update <= 3.3.1 - Cross-Site Request Forgery via bspu_plugin_select.php
Medium
CVE-2023-5232
Font Awesome More Icons <= 3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-5041
Track The Click <= 0.3.11 - Authenticated (Author+) SQL Injection via 'stats' REST Endpoint
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.