High
CVE-2015-3542
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,070
Reset filters
Low
CVE-2024-51758
Filament has exported files stored in default (`public`) filesystem if not reconfigured
Medium
CVE-2024-43436
Moodle vulnerable to site administration SQL injection via XMLDB editor
Medium
CVE-2024-43438
Moodle's IDOR in Feedback non-respondents report allows messaging arbitrary site users
Medium
CVE-2024-43426
Moodle has arbitrary file read risk through pdfTeX
Medium
CVE-2024-43440
Moodle LFI vulnerability when restoring malformed block backups
High
CVE-2024-43425
Moodle Remote Code Execution vulnerability
Medium
CVE-2024-43428
Moodle vulnerable to cache poisoning via injection into storage
Medium
CVE-2024-43431
Moodle's IDOR in badges allows deletion of arbitrary badges
High
CVE-2024-43434
Moodle has CSRF risk in Feedback non-respondents report
Low
CVE-2024-51755
Twig has unguarded calls to `__isset()` and to array-accesses when the sandbox is enabled
Low
CVE-2024-51754
Twig has unguarded calls to `__toString()` when nesting an object into an array
Medium
CVE-2024-50637
UnoPim Cross-site Scripting vulnerability
Unrated
CVE-2024-13292
drupal/tooltip - SA-CONTRIB-2024-058
High
CVE-2024-51736
Symfony vulnerable to command execution hijack on Windows with Process class
Low
CVE-2024-50345
Symfony vulnerable to open redirect via browser-sanitized URLs
Low
CVE-2024-50343
Symfony has an incorrect response from Validator when input ends with `\n`
Low
CVE-2024-50342
Symfony allows internal address and port enumeration by NoPrivateNetworkHttpClient
Low
CVE-2024-50341
Symfony's `Security::login` does not take into account custom `user_checker`
Medium
CVE-2024-50340
Symfony allows changing the environment through a query
High
CVE-2024-50347
Laravel Reverb Missing API Signature Verification
High
CVE-2024-51478
YesWiki Uses a Broken or Risky Cryptographic Algorithm
High
CVE-2024-48112
ThinkPHP deserialization vulnerability
Unrated
CVE-2024-13290
drupal/ohdear_integration - SA-CONTRIB-2024-056
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.