High
CVE-2024-39400
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,071
Reset filters
High
CVE-2024-39399
Magento Path Traversal vulnerability
High
CVE-2024-39398
Magento does not properly restrict excessive authentication attempts
High
CVE-2024-39402
Magento OS Command ('OS Command Injection') vulnerability
High
CVE-2024-39401
Magento OS Command ('OS Command Injection') vulnerability
Medium
CVE-2024-39404
Magento Improper Authorization vulnerability
High
CVE-2024-42485
Filament Excel Vulnerable to Path Traversal Attack on Export Download Endpoint
Low
CVE-2024-7512
Concrete CMS vulnerable to Stored Cross-site Scripting
Medium
CVE-2024-4350
Concrete CMS Stored Cross-site Scripting vulnerability
Medium
CVE-2024-7394
Concrete CMS Stored XSS in getAttributeSetName
Medium
CVE-2024-42357
Shopware vulnerable to blind SQL-injection in DAL aggregations
High
CVE-2024-42356
Shopware vulnerable to Server Side Template Injection in Twig using Context functions
High
CVE-2024-42355
Shopware vulnerable to Server Side Template Injection in Twig using deprecation silence tag
Medium
CVE-2024-42354
Shopware vulnerable to Improper Access Control with ManyToMany associations in store-api
Unrated
CVE-2024-13265
drupal/opigno_learning_path - SA-CONTRIB-2024-029
Unrated
CVE-2024-13264
drupal/opigno_module - SA-CONTRIB-2024-028
Unrated
CVE-2024-13263
drupal/opigno_group_manager - SA-CONTRIB-2024-027
Medium
CVE-2024-40101
Microweber Reflected Cross-site scripting (XSS) vulnerability
Medium
CVE-2024-41381
Microweber Cross Site Scripting (XSS) vulnerability
Medium
CVE-2024-41380
Microweber Cross Site Scripting (XSS) vulnerability
Low
CVE-2024-41811
ipl/web's `ipl\Web\Common\CsrfCounterMeasure` is susceptible to CSRF
Medium
CVE-2024-4353
Concrete CMS vulnerable to Stored Cross-site Scripting
Medium
ghsa-gc5h-6jx9-q2qh
eZ Platform Admin UI vulnerable to DOM-based Cross-site Scripting in file upload widget
Unrated
CVE-2024-13262
drupal/view_password - SA-CONTRIB-2024-026
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.