High
CVE-2023-40572
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
ghsa-jxcx-3h54-qqxx
SilverStripe CMS Cross-site Scripting vulnerabilities inherited from TinyMCE
Medium
CVE-2023-39441
Apache Airflow missing Certificate Validation
High
CVE-2023-37379
Apache Airflow, in versions prior to 2.7.0, contains a security vulnerability that can be exploited by an authenticated user possessing Connection edit privileges. This vulnerability allows the user t
High
CVE-2023-40273
The session fixation vulnerability allowed the authenticated user to continue accessing Airflow webserver even after the password of the user has been reset by the admin - up until the expiry of the s
Unrated
drupal-contrib-2023-040
drupal/datafield - SA-CONTRIB-2023-040
Unrated
drupal-contrib-2023-039
drupal/safedelete - SA-CONTRIB-2023-039
Unrated
drupal-contrib-2023-038
drupal/shorthand - SA-CONTRIB-2023-038
Unrated
drupal-contrib-2023-037
drupal/config_pages - SA-CONTRIB-2023-037
Unrated
drupal-contrib-2023-035
drupal/forum_access - SA-CONTRIB-2023-035
Unrated
drupal-contrib-2023-034
drupal/acl - SA-CONTRIB-2023-034
High
CVE-2022-25024
The json2xml package through 3.12.0 for Python allows an error in typecode decoding enabling a remote attack that can lead to an exception, causing a denial of service.
Medium
CVE-2023-41100
hCaptcha for EXT:form Broken Access Control vulnerability
Medium
CVE-2023-2995
Leyka <= 3.30.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-39993
Elements kit Elementor addons <= 2.9.1 - Missing Authorization
Medium
0c6bc786-341a-4ab6-b86e-d21bb3dbf298
WP VK-付费内容插件 <= 1.3.3 - Cross-Site Request Forgery via AJAX actions
Critical
CVE-2023-36281
An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via the via the a json file to the load_prompt parameter.
High
CVE-2023-39141
webui-aria2 Path Traversal vulnerability
Medium
CVE-2022-44730
Apache Batik information disclosure vulnerability
High
CVE-2022-44729
Apache XML Graphics Batik Server-Side Request Forgery vulnerability
Medium
CVE-2022-45582
Open Redirect vulnerability in Horizon Web Dashboard 19.4.0 thru 20.1.4 via the success_url parameter.
High
CVE-2020-18831
Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecified impacts via use of crafted file.
High
CVE-2023-40185
Shescape on Windows escaping may be bypassed in threaded context
Medium
CVE-2023-4303
Jenkins Fortify Plugin HTML injection vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.