Medium
d7d08bfd-9861-4e21-a696-25b00233ad94
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2023-4757
Staff / Employee Business Directory for Active Directory <= 1.2.1 - Insufficient Escaping of Stored LDAP Values
Medium
CVE-2023-4838
Simple Download Counter <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-41952
Contact Form for Plugin by Fluent Forms <= 5.0.8 - Insecure Direct Object Reference
Medium
CVE-2023-41050
Information disclosure in AccessControl
High
CVE-2023-4536
My Account Page Editor <= 1.3.1 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
ee595f48-b72f-4569-a248-7dbd0b9152ae
Easy Form by AYS <= 1.3.8 - Cross-Site Request Forgery
Critical
CVE-2023-4666
Form Maker by 10Web <= 1.15.19 - Unauthenticated Arbitrary File Upload
Medium
CVE-2023-51375
EmbedPress <= 3.8.3 - Cross-Site Request Forgery
Medium
CVE-2023-39676
XSS in FieldPopupNewsletter Prestashop Module
Medium
CVE-2023-39677
PHPInfo Exposure in MyPrestaModules SimpleImportProduct and UpdateProducts Modules
Critical
CVE-2023-39675
Improper neutralization of a SQL parameter in simpleimportproduct from MyPrestaModules module for PrestaShop
Medium
CVE-2023-41327
WireMock Controlled Server Side Request Forgery vulnerability through URL
Medium
CVE-2023-39956
Electron vulnerable to out-of-package code execution when launched with arbitrary cwd
Medium
CVE-2023-29198
Electron context isolation bypass via nested unserializable return value
High
CVE-2023-23623
Electron's Content-Secrity-Policy disabling eval not applied consistently in renderers with sandbox disabled
Unrated
drupal-contrib-2023-044
drupal/webprofiler - SA-CONTRIB-2023-044
Medium
CVE-2023-39265
Apache Superset Improper Input Validation vulnerability
Medium
CVE-2023-37941
Apache Superset Deserialization of Untrusted Data vulnerability
Medium
CVE-2023-32672
Apache Superset has incorrect authorization check
Critical
CVE-2021-36021
Magento affected by remote code execution vulnerability in the CMS page scheduled update feature
Critical
CVE-2021-36036
Magento improper access control vulnerability within Magento's Media Gallery Upload workflow
Critical
CVE-2021-36023
Magento XML Injection vulnerability in the Widgets Update Layout
Medium
CVE-2023-27523
Apache Superset vulnerable to improper data authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.