Critical
CVE-2023-36471
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Critical
CVE-2023-36475
Parse Server vulnerable to remote code execution via MongoDB BSON parser through prototype pollution
Critical
CVE-2023-36477
XWiki Platform vulnerable to persistent Cross-site Scripting through CKEditor Configuration pages
High
CVE-2023-2422
Keycloak vulnerable to Improper Client Certificate Validation for OAuth/OpenID clients
Critical
CVE-2022-4361
Keycloak vulnerable to cross-site scripting when validating URI-schemes on SAML and OIDC
Medium
CVE-2023-1664
Keycloak Untrusted Certificate Validation vulnerability
Low
CVE-2023-2585
Client Spoofing within the Keycloak Device Authorisation Grant
Medium
CVE-2023-37302
MediaWiki Cross-site Scripting vulnerability
Medium
CVE-2023-34840
angular-ui-notification Cross-site Scripting vulnerability
Unrated
CVE-2023-37360
pacparser_find_proxy in Pacparser before 1.4.2 allows JavaScript injection, and possibly privilege escalation, when the attacker controls the URL (which may be realistic within enterprise security pro
Medium
CVE-2023-37299
Joplin Cross-site Scripting vulnerability
Medium
CVE-2023-37298
Joplin Cross-site Scripting vulnerability
High
CVE-2023-26135
flatnest Prototype Pollution vulnerability
Medium
CVE-2023-3469
phpMyFAQ Cross-site Scripting
High
CVE-2023-36677
SP Project & Document Manager <= 4.67 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2023-36691
WebwinkelKeur <= 3.24 - Cross-Site Request Forgery
Medium
CVE-2023-34377
My Content Management <= 1.7.6 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
9854d09a-2fab-46e6-9fc1-ff6d68df2662
Request a Quote <= 2.3.10 - Cross-Site Request Forgery
Medium
CVE-2023-36689
WPFactory Helper <= 1.5.2 - Reflected Cross-Site Scripting via item_slug
Medium
CVE-2023-23823
Enhanced Text Widget <= 1.5.8 - Missing Authorization
Medium
6309c706-f84a-4997-9a9b-1bd8cf8f711a
Knowledge Center <= 2.7 - Authenticated (Admin+) Cross-Site Scripting
Medium
CVE-2023-36530
SP Project & Document Manager <= 4.67 - Authenticated (Administrator+) Stored Cross-Site Scripting via plugin settings
Medium
296f15eb-0782-4351-a2c5-c8ef6f005352
TrustProfile <= 3.24 - Cross-Site Request Forgery
High
CVE-2020-26708
requests-xml v0.2.3 was discovered to contain an XML External Entity Injection (XXE) vulnerability which allows attackers to execute arbitrary code via a crafted XML file.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.