Medium
CVE-2023-32240
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Critical
CVE-2023-30192
Improper neutralization of SQL parameter in PosThemes - Search Products for PrestaShop
Medium
CVE-2023-2614
Pimcore Cross-site Scripting (XSS) in name field of Custom Reports
Medium
CVE-2023-2615
Pimcore Cross-site Scripting (XSS) in Predefined Properties delete
Medium
ghsa-r3fg-3r88-6x3f
Ibexa User Settings are accessible on the front-end for anonymous user
Medium
CVE-2023-32076
in-toto vulnerable to Configuration Read From Local Directory
High
CVE-2023-27564
n8n Information Disclosure vulnerability
High
CVE-2023-27563
n8n Privilege Escalation vulnerability
Medium
CVE-2023-27562
n8n Directory Traversal vulnerability
High
CVE-2023-26126
m.static Directory Traversal vulnerability
High
CVE-2023-32236
Booking Ultra Pro <= 1.1.8 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2023-32519
WCP Contact Form <= 3.1.0 - Missing Authorization
Medium
CVE-2023-32514
Google Site Verification plugin using Meta Tag <= 1.2 - Cross-Site Request Forgery
Medium
CVE-2023-29238
Whydonate – FREE Donate button <= 3.12.14 - Cross-Site Request Forgery
High
CVE-2023-54346
Backup Migration <= 1.2.8 - Sensitive Information Exposure
Medium
CVE-2023-2600
Custom Base Terms <= 1.0.2.3 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'base'
High
CVE-2023-2252
Directorist <= 7.5.3 - Authenticated (Administrator+) Local File Inclusion
Medium
CVE-2022-45354
Download Monitor <= 4.7.60 - Sensitive Information Exposure via REST API
Medium
CVE-2023-2503
10Web Social Post Feed <= 1.2.8 - Reflected Cross-Site Scripting
Medium
CVE-2023-32509
Order Your Posts Manually <= 2.2.5 - Reflected Cross-Site Scripting via 'cat_id'
Medium
CVE-2023-23999
Google Analytics by Monster Insights <= 8.14.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-0545
Hostel <= 1.1.5.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-2472
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue <= 3.1.60 - Reflected Cross-Site Scripting via 'lang'
Medium
CVE-2023-32517
MailChimp Subscribe Forms <= 4.0.9.3 - Open Redirect
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.