Medium
CVE-2023-4796
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2023-4945
Booster for WooCommerce <= 7.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-4944
Awesome Weather Widget <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-4841
Feeds for YouTube <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-4947
WooCommerce EAN Payment Gateway < 6.1.0 - Missing Authorization to Authenticated (Contributor+) EAN Update
High
CVE-2023-4402
Essential Blocks <= 4.2.0 - Unauthenticated PHP Object Injection via products
Medium
CVE-2023-41885
Piccolo's current `BaseUser.login` implementation is vulnerable to time based user enumeration
High
CVE-2023-4918
Keycloak vulnerable to Plaintext Storage of User Password
High
CVE-2023-36792
Microsoft Security Advisory CVE-2023-36792: .NET Remote Code Execution Vulnerability
High
CVE-2023-36794
Microsoft Security Advisory CVE-2023-36794: .NET Remote Code Execution Vulnerability
High
CVE-2023-36793
Microsoft Security Advisory CVE-2023-36793: .NET Remote Code Execution Vulnerability
High
CVE-2023-36796
Microsoft Security Advisory CVE-2023-36796: .NET Remote Code Execution Vulnerability
Medium
CVE-2023-36799
Microsoft Security Advisory CVE-2023-36799: .NET Denial of Service Vulnerability
High
CVE-2023-40712
Apache Airflow, versions before 2.7.1, is affected by a vulnerability that allows authenticated users who have access to see the task/dag in the UI, to craft a URL, which could lead to unmasking the s
Medium
CVE-2023-40611
Apache Airflow, versions before 2.7.1, is affected by a vulnerability that allows authenticated and DAG-view authorized Users to modify some DAG run detail values when submitting notes. This could hav
High
Exploited in attacks
CVE-2023-4863
libwebp: OOB write in BuildHuffmanTable
High
CVE-2023-4914
Cecil Path Traversal vulnerability
Medium
CVE-2023-4913
Cecil Cross-site Scripting vulnerability
Critical
CVE-2023-41887
OpenRefine Remote Code execution in project import with mysql jdbc url attack
High
CVE-2023-41886
OpenRefine vulnerable to arbitrary file read in project import with mysql jdbc url attack
Medium
CVE-2023-41369
The Create Single Payment application of SAP S/4HANA - versions 100, 101, 102, 103, 104, 105, 106, 107, 108, allows an attacker to upload the XML file as an attachment. When clicked on the XML file in
Medium
CVE-2023-4915
WP User Control <= 1.5.3 - Insecure Password Reset Mechanism
Medium
e1dbd0e2-8c6c-4127-b37c-269af3b7f71c
Jetpack CRM <= 5.5.0 - Authenticated (Client+) Stored Cross-Site Scripting
Medium
CVE-2023-4917
Leyka <= 3.30.7 - Authenticated (Subscriber+) Sensitive Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.