Unrated
drupal-contrib-2023-005
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Critical
CVE-2023-24997
Apache InLong vulnerable to Deserialization of Untrusted Data vulnerability
High
CVE-2023-24977
Apache InLong contains Out-of-bounds Read vulnerability
High
CVE-2022-25916
mt7688-wiscan is vulnerable to Command Injection due to improper input sanitization
High
CVE-2022-25906
is-http2 vulnerable to Improper Input Validation
Medium
CVE-2023-0608
Microweber contains Cross-site Scripting
Critical
CVE-2023-23924
Dompdf vulnerable to URI validation failure on SVG parsing
Medium
CVE-2023-0619
Kraken.io Image Optimizer <= 2.6.9 - Missing Authorization to Authenticated (Subscriber+) Plugin Options Update
Medium
CVE-2023-0535
Donation Block For PayPal <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
cfc59e3d-13c6-4051-8a1a-d109ea06b10b
Opening Hours <= 2.3.0 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2023-24419
Formidable Form Builder <= 5.5.6 - Cross-Site Request Forgery
Medium
82f4ad21-bc55-4daf-bc46-90969dcbabdd
We’re Open! <= 1.44 - Missing Authorization
Medium
CVE-2022-4679
Wufoo Shortcode <= 1.51 - Authenticated (Contributor+) Cross-Site Scripting via Shortcodes
Medium
CVE-2023-23891
Ocean Extra <= 2.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2023-23630
XSS Attack with Express API
High
CVE-2023-22474
Parse Server option `masterKeyIps` vulnerability to IP spoofing
Critical
CVE-2023-24163
Dromara hutool vulnerable to SQL Injection
Critical
CVE-2023-24162
Dromara Hutool Deserialization of Untrusted Data vulnerability
Medium
CVE-2022-45598
Joplin Desktop App vulnerable to Cross-site Scripting
High
CVE-2022-44645
Apache Linkis contains Deserialization of Untrusted Data
Medium
CVE-2022-44644
Apache Linkis vulnerable to Exposure of Sensitive Information
Medium
CVE-2023-0591
ubireader_extract_files is vulnerable to path traversal when run against specifically crafted UBIFS files, allowing the attacker to overwrite files outside of the extraction directory (provided the pr
Unrated
CVE-2023-24829
Incorrect Authorization vulnerability in Apache Software Foundation Apache IoTDB.This issue affects the iotdb-web-workbench component from 0.13.0 before 0.13.3. iotdb-web-workbench is an optional comp
Medium
CVE-2022-25881
http-cache-semantics < 4.1.1 - Regular Expression Denial of Service (ReDoS)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.