High
CVE-2023-39157
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
High
CVE-2023-4139
WP Ultimate CSV Importer <= 7.9.8 - Sensitive Information Exposure via Directory Listing
Medium
CVE-2023-4140
WP Ultimate CSV Importer <= 7.9.8 - Arbitrary Usermeta Update to Authenticated (Author+) Privilege Escalation
Medium
CVE-2023-4036
Simple Blog Card <= 1.31 - Sensitive Information Exposure
Critical
CVE-2023-33666
Improper neutralization of a SQL parameter in aioptimizedcombinations from ai-dev module for PrestaShop
Unrated
drupal-contrib-2023-033
drupal/matomo - SA-CONTRIB-2023-033
Medium
CVE-2023-3426
Liferay Portal and Liferay DXP Organization Selector Does Not Check User Permissions
Medium
ed98d335-16f9-4be8-bace-06e2b5db4cb9
Simple Share Follow Button <= 1.03 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-1982
Guest posting / Frontend Posting wordpress plugin – WP Front User Submit / Front Editor <= 4.4.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-3501
FormCraft <= 1.2.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2023-41874
Order Delivery Date for WooCommerce <= 3.20.0 - Reflected Cross-Site Scripting via 'orddd_lite_custom_startdate' and 'orddd_lite_custom_enddate'
Medium
CVE-2023-4315
Woo Custom Emails <= 2.2 - Reflected Cross-Site Scripting via wcemails_edit
Medium
CVE-2023-3992
PostX - Gutenberg Post Grid Blocks <= 3.0.5 - Reflected Cross-Site Scripting via 'postx_type'
Medium
CVE-2023-3720
Upload Media By URL <= 1.0.7 - Cross-Site Request Forgery via 'umbu_download'
Medium
162595bb-d41b-4dfd-bfda-3a1e5794eaaf
Simple Ticker <= 3.05 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Low
ghsa-jm77-qphf-c4w8
pyca/cryptography's wheels include vulnerable OpenSSL
Medium
ghsa-xqcq-j8w9-3pxv
Jettison parser crash by stackoverflow
Medium
CVE-2023-38698
.eth registrar controller can shorten the duration of registered names
High
CVE-2023-37478
pnpm incorrectly parses tar archives relative to specification
Medium
CVE-2023-38695
@simonsmith/cypress-image-snapshothas fix for insecure snapshot file names
High
CVE-2022-39987
RaspAP Command Injection vulnerability
Critical
CVE-2022-39986
RaspAP Command Injection vulnerability
High
CVE-2023-26139
underscore-keypath vulnerable to Prototype Pollution
High
CVE-2023-4033
OS Command Injection in GitHub repository mlflow/mlflow prior to 2.6.0.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.