Medium
CVE-2023-4161
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2023-40007
CT Commerce <= 2.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via admin settings
Medium
CVE-2023-40200
Multiple WPOnlineSupport Plugins <= (Various Versions) - Missing Authorization to Notice Dismissal
Medium
CVE-2023-4314
wpDataTables - Tables & Table Charts <= 2.1.65 - Authenticated(Administrator+) PHP Object Injection
Medium
078d06ad-555b-4de4-a032-d81440c7dfb5
Smart SEO Tool-WordPress SEO优化插件 <= 4.0.1 - Cross-Site Request Forgery via 'wp_ajax_wb_smart_seo_tool'
Critical
CVE-2023-33663
Improper neutralization of a SQL parameter in aicustomfee from ai-dev module for PrestaShop
Medium
CVE-2023-40028
Ghost vulnerable to arbitrary file read via symlinks in content import
Medium
CVE-2023-40027
When `ui.isAccessAllowed` is `undefined`, the `adminMeta` GraphQL query is publicly accessible
Critical
CVE-2023-39661
PandasAI vulnerable to arbitrary code execution
Critical
CVE-2023-38889
Alluxio vulnerable to arbitrary code execution
Critical
CVE-2023-39662
An issue in llama_index v.0.7.13 and before allows a remote attacker to execute arbitrary code via the `exec` parameter in PandasQueryEngine function.
Critical
CVE-2023-38896
An issue in Harrison Chase langchain v.0.0.194 and before allows a remote attacker to execute arbitrary code via the from_math_prompt and from_colored_object_prompt functions.
Critical
CVE-2023-39659
An issue in langchain langchain-ai v.0.0.232 and before allows a remote attacker to execute arbitrary code via a crafted script to the PythonAstREPLTool._run component.
Critical
CVE-2023-38860
An issue in LangChain v.0.0.231 allows a remote attacker to execute arbitrary code via the prompt parameter.
High
CVE-2023-4347
LibreNMS Cross-site Scripting vulnerability
Medium
CVE-2023-3499
Robo Gallery <= 3.2.15 - Authenticated(Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-40326
Putler Connector for WooCommerce <= 2.12.0 - Missing Authorization via 'send_resync_request'
Medium
CVE-2023-4374
WP Remote Users Sync <= 1.2.11 - Missing Authorization to Authenticated (Subscriber+) Log View
High
CVE-2023-3958
WP Remote Users Sync <= 1.2.12 - Authenticated (Subscriber+) Server Side Request Forgery
Medium
CVE-2023-40327
Putler Connector for WooCommerce <= 2.12.0 - Missing Authorization via 'putler_connector_sync_complete'
Medium
CVE-2023-54397
Tornado vulnerable to HTTP request smuggling via improper parsing of `Content-Length` fields and chunk lengths
Critical
CVE-2023-40013
external-svg-loader Cross-site Scripting vulnerability
Medium
CVE-2023-38687
Svelecte item names vulnerable to execution of arbitrary JavaScript
Medium
CVE-2023-40312
OpenNMS vulnerable to Cross-site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.