Known Vulnerabilities

This page lists 13509 vulnerabilities in this category.

Critical: 1465 High: 3387 Medium: 7907 Low: 748 Information: 2

Vulnerability Name

CVE

CWE

Severity

Grafana Incorrect Authorization Vulnerability (CVE-2023-6152)

CVE-2023-6152

CWE-863

Medium

phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-6889)

CVE-2023-6889

CWE-707

Medium

Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-19212)

CVE-2020-19212

CWE-138

Medium

osCommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-6296)

CVE-2023-6296

CWE-707

Medium

MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-19049)

CVE-2020-19049

CWE-707

Medium

MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-19048)

CVE-2020-19048

CWE-707

Medium

Python CVE-2023-6507 Vulnerability (CVE-2023-6507)

CVE-2023-6507

-

Medium

Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-18671)

CVE-2020-18671

CWE-707

Medium

TCExam Missing Authorization Vulnerability (CVE-2023-6554)

CVE-2023-6554

CWE-862

Medium

osCommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-6609)

CVE-2023-6609

CWE-707

Medium

WP Plugin Contact Form 7 Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2023-6630)

CVE-2023-6630

CWE-639

Medium

Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-18670)

CVE-2020-18670

CWE-707

Medium

Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-18470)

CVE-2020-18470

CWE-707

Medium

Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-18469)

CVE-2020-18469

CWE-707

Medium

phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-6890)

CVE-2023-6890

CWE-707

Medium

Pega Infinity Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-10716)

CVE-2024-10716

CWE-707

Medium

Sqlite Use After Free Vulnerability (CVE-2024-0232)

CVE-2024-0232

CWE-416

Medium

qdPM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-18468)

CVE-2020-18468

CWE-707

Medium

Dot CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-17542)

CVE-2020-17542

CWE-707

Medium

OpenSSL CVE-2024-0727 Vulnerability (CVE-2024-0727)

CVE-2024-0727

-

Medium

TinyMCE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-17480)

CVE-2020-17480

CWE-707

Medium

PHP-Fusion Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-17450)

CVE-2020-17450

CWE-707

Medium

PHP-Fusion Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-17449)

CVE-2020-17449

CWE-707

Medium

SugarCRM Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-17373)

CVE-2020-17373

CWE-138

Medium

SugarCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-17372)

CVE-2020-17372

CWE-707

Medium

SharePoint CVE-2020-17121 Vulnerability (CVE-2020-17121)

CVE-2020-17121

-

Medium

SharePoint CVE-2020-17120 Vulnerability (CVE-2020-17120)

CVE-2020-17120

-

Medium

SharePoint CVE-2020-17115 Vulnerability (CVE-2020-17115)

CVE-2020-17115

-

Medium

WordPress Ultimate Member Plugin Missing Authorization Vulnerability (CVE-2024-10528)

CVE-2024-10528

CWE-862

Medium

Dolibarr Missing Authorization Vulnerability (CVE-2023-4198)

CVE-2023-4198

CWE-862

Medium

phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-4007)

CVE-2023-4007

CWE-707

Medium

Magento Improper Authorization Vulnerability (CVE-2020-24405)

CVE-2020-24405

CWE-285

Medium

osTicket Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-22609)

CVE-2020-22609

CWE-707

Medium

Liferay DXP URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2023-44308)

CVE-2023-44308

CWE-601

Medium

Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-44309)

CVE-2023-44309

CWE-707

Medium

Chamilo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-23126)

CVE-2020-23126

CWE-707

Medium

TinyMCE Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-23066)

CVE-2020-23066

CWE-707

Medium

Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-44309)

CVE-2023-44309

CWE-707

Medium

Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-44310)

CVE-2023-44310

CWE-707

Medium

jQuery Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-23064)

CVE-2020-23064

CWE-707

Medium

Liferay DXP Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-44310)

CVE-2023-44310

CWE-707

Medium

Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-44311)

CVE-2023-44311

CWE-707

Medium

b2evolution Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-22841)

CVE-2020-22841

CWE-707

Medium

b2evolution URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2020-22840)

CVE-2020-22840

CWE-601

Medium

Zope Web Application Server Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-44389)

CVE-2023-44389

CWE-707

Medium

osTicket Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-22608)

CVE-2020-22608

CWE-707

Medium

Roundcube Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-43770)

CVE-2023-43770

CWE-707

Medium

WebERP Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2020-22474)

CVE-2020-22474

CWE-732

Medium

LimeSurvey Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-44796)

CVE-2023-44796

CWE-707

Medium

XWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-45137)

CVE-2023-45137

CWE-707

Medium

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-45360)

CVE-2023-45360

CWE-707

Medium

MediaWiki CVE-2023-45362 Vulnerability (CVE-2023-45362)

CVE-2023-45362

-

Medium

MediaWiki Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2023-45364)

CVE-2023-45364

CWE-732

Medium

MediaWiki CVE-2023-45367 Vulnerability (CVE-2023-45367)

CVE-2023-45367

-

Medium

MediaWiki Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2023-45369)

CVE-2023-45369

CWE-732

Medium

MediaWiki CVE-2023-45370 Vulnerability (CVE-2023-45370)

CVE-2023-45370

-

Medium

MediaWiki CVE-2023-45372 Vulnerability (CVE-2023-45372)

CVE-2023-45372

-

Medium

phpList Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-22251)

CVE-2020-22251

CWE-707

Medium

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-45373)

CVE-2023-45373

CWE-707

Medium

Piwigo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-22150)

CVE-2020-22150

CWE-707

Medium

Chamilo Improper Privilege Management Vulnerability (CVE-2020-23128)

CVE-2020-23128

CWE-269

Medium

osCommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-43735)

CVE-2023-43735

CWE-707

Medium

MediaWiki CVE-2023-45374 Vulnerability (CVE-2023-45374)

CVE-2023-45374

-

Medium

phpList Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-23209)

CVE-2020-23209

CWE-707

Medium

Magento Improper Authorization Vulnerability (CVE-2020-24402)

CVE-2020-24402

CWE-285

Medium

Magento Incorrect Authorization Vulnerability (CVE-2020-24401)

CVE-2020-24401

CWE-863

Medium

Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-24303)

CVE-2020-24303

CWE-707

Medium

LimeSurvey Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-23710)

CVE-2020-23710

CWE-707

Medium

PHP-Fusion Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-23702)

CVE-2020-23702

CWE-707

Medium

PHP-Fusion Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-23658)

CVE-2020-23658

CWE-707

Medium

osCommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-43728)

CVE-2023-43728

CWE-707

Medium

osCommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-43729)

CVE-2023-43729

CWE-707

Medium

osCommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-43730)

CVE-2023-43730

CWE-707

Medium

ATutor Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-23341)

CVE-2020-23341

CWE-707

Medium

phpList Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-23217)

CVE-2020-23217

CWE-707

Medium

«
1
...
98
99
100
...
181
»