Medium
CVE-2023-40311
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
High
CVE-2023-0872
OpenNMS privilege elevation vulnerability
High
CVE-2023-4321
Cockpit Cross-site Scripting vulnerability
Critical
CVE-2023-35039
Password Reset with Code for WordPress REST API <= 0.0.15 - Weak Password Recovery Mechanism
Medium
CVE-2023-3814
Advanced File Manager <= 5.1 - Authenticated (Administrator+) Arbitrary File and Folder Access
High
CVE-2023-2916
InfiniteWP Client <= 1.11.1 - Authenticated (Subscriber+) Sensitive Information Exposure
Medium
CVE-2023-4019
Media from FTP <= 11.16 - Authenticated (Author+) Improper Privilege Management
Medium
CVE-2023-27433
Make Paths Relative <= 1.3.0 - Cross-Site Request Forgery via 'admin/class-make-paths-relative-admin.php'
Medium
CVE-2023-4279
User Activity Log <= 1.6.6 - IP Address Spoofing
Medium
CVE-2023-29441
WebLibrarian <= 3.5.8.1 - Reflected Cross-Site Scripting via multiple parameters
Low
CVE-2023-4216
Orders Tracking for WooCommerce <= 1.2.5 - Authenticated (Administrator+) Directory Traversal via 'file_url'
High
CVE-2023-4308
User Submitted Posts <= 20230809 - Unauthenticated Stored Cross-Site Scripting via 'user-submitted-content'
Medium
39c9f055-2527-4678-bda1-27a29ab24acd
Products Quick View for WooCommerce <= 2.2.0 - Missing Authorization
Medium
CVE-2023-2813
Multiple Themes (Various Versions) - Reflected Cross-Site Scripting via Search Field
Medium
CVE-2023-30497
LINE Notify <= 1.4.4 - Reflected Cross-Site Scripting via 'uid'
Medium
CVE-2023-4298
123.chat <= 1.3.0 - Authenticated(Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-38394
JupiterX Core 3.0.0 - 3.3.0 - Missing Authorization
High
CVE-2023-38385
JupiterX Core 3.0.0 - 3.3.0 - Missing Authorization
High
CVE-2023-35391
.NET Information Disclosure Vulnerability
Medium
CVE-2023-40014
OpenZeppelin Contracts vulnerable to Improper Escaping of Output
Medium
CVE-2023-3481
Critters Cross-site Scripting Vulnerability
High
CVE-2023-0871
OpenNMS Horizon XXE Injection Vulnerability
High
CVE-2020-24922
xuxueli xxl-job Cross-Site Request Forgery Vulnerability
Medium
CVE-2021-29057
SUCHMOKUO node-worker-threads-pool denial of service Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.