High
CVE-2023-27899
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-27902
Incorrect Permission Preservation in Jenkins Core
Medium
CVE-2023-27900
Denial of service in Jenkins Core
High
CVE-2023-27901
Denial of service in Jenkins Core
Medium
CVE-2023-27905
Cross site scripting vulnerability in update-center2
Critical
CVE-2021-33360
stoqey/gnuplot is vulnerable to command injection
High
CVE-2023-26464
Apache Log4j 1.x (EOL) allows Denial of Service (DoS)
Critical
CVE-2023-24774
Funadmin vulnerable to SQL injection
High
CVE-2023-1313
cockpit-hq/cockpit is vulnerable to unrestricted file uploads
Medium
CVE-2023-1312
pimcore is vulnerable to cross-site scripting
Critical
CVE-2023-1307
Froxlor is vulnerable to authentication bypass
Medium
CVE-2023-27115
WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt::cat_compute_size.
High
CVE-2023-27117
WebAssembly v1.0.29 was discovered to contain a heap overflow via the component component wabt::Node::operator.
Medium
CVE-2023-27119
WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt::Decompiler::WrapChild.
Medium
CVE-2023-1334
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Missing Authorization in 'queue_posts'
Medium
CVE-2023-27423
Auto Prune Posts <= 1.8.0 - Cross-Site Request Forgery via admin_menu
Medium
CVE-2023-1335
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Missing Authorization in 'ucss_connect'
Medium
CVE-2023-1341
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Cross-Site Request Forgery via 'ajax_deactivate'
Medium
CVE-2023-1345
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Cross-Site Request Forgery via 'queue_posts'
Medium
ce060989-ce70-49ac-921c-a687bc944090
Mass Delete Taxonomies <= 3.0.0 - Cross-Site Request Forgery via mp_plugin_mass_delete_tags_init
Medium
CVE-2022-40211
GiveWP <= 2.25.1 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2023-1336
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Missing Authorization in 'ajax_deactivate'
Medium
CVE-2023-1346
RapidLoad Power-Up for Autoptimize <= 1.7.1 - Cross-Site Request Forgery via 'clear_page_cache'
Critical
aefbebce-9433-455d-b27c-93088b0c8494
LeadSnap <= 1.23 - Unauthenticated PHP Object Injection via AJAX
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.