High
CVE-2023-0876
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2023-26536
Sp*tify Play Button for WordPress <= 2.05 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-0586
All in One SEO Pack <= 4.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2023-25960
Zendrop – Global Dropshipping <= 1.0.0 - SQL Injection in setMetaData
Medium
CVE-2023-25823
Update share links to use FRP instead of SSH tunneling
Critical
CVE-2022-4492
Undertow client not checking server identity presented by server certificate in https connections
Medium
CVE-2023-0044
Cross-site Scripting in Quarkus
Medium
CVE-2023-22476
MantisBT may expose private issues' summaries to unauthorized users
Critical
CVE-2023-22579
Unsafe fall-through in getWhereConditions
Medium
CVE-2023-0869
Cross Site Scripting in OpenNMS
Medium
CVE-2023-0868
OpenNMS Meridian and Horizon vulnerable to Cross-site Scripting
Medium
CVE-2023-0867
OpenNMS Meridian and Horizon vulnerable to Cross-site Scripting
Medium
CVE-2023-0815
OpenNMS has potential Insertion of Sensitive Information into Log File vulnerability
Medium
CVE-2023-25621
Improper Privilege Management in Apache Sling
High
CVE-2023-26302
Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as input.
High
CVE-2023-26303
Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input.
High
CVE-2023-0630
Slimstat Analytics <= 4.9.3.2 - Authenticated (Subscriber+) SQL Injection via Shortcode
Medium
CVE-2023-25985
WordPress Tooltips <= 8.2.5 - Multiple Cross-Site Request Forgery
High
CVE-2023-23861
GMAce <= 1.5.2 - Cross-Site Request Forgery via gmace_manager_client
Medium
CVE-2023-23872
GMAce <= 1.5.2 - Authenticated(Admin+) Directory Traversal
Medium
CVE-2023-25992
CM Answers <= 3.1.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-25977
CPT – Speakers <= 1.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2023-25965
Upload Resume <= 1.2.0 - Authenticated Sensitive Information Disclosure via resume_upload_form_list shortcode
Medium
CVE-2023-25458
TypeSquare Webfonts for ConoHa <= 2.0.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.