High
ghsa-hq76-662x-7mw4
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,407
Reset filters
Medium
CVE-2024-45232
"powermail" (powermail) Insecure Direct Object Reference (IDOR)
High
CVE-2024-45048
XXE in PHPSpreadsheet encoding is returned
High
CVE-2024-41964
Kirby has insufficient permission checks in the language settings
Medium
CVE-2024-45233
Powermail TYPO3 extension Broken Access Control in the OutputController
High
CVE-2024-58383
Froxlor: /etc/pure-ftpd/db/mysql.conf is chmod 644 but contains <SQL_UNPRIVILEGED_PASSWORD>
Medium
CVE-2024-43407
Code Snippet GeSHi plugin in CKEditor 4 has reflected cross-site scripting (XSS) vulnerability
Unrated
CVE-2024-13266
drupal/responsive_menu - SA-CONTRIB-2024-030
High
CVE-2024-43372
Persistent Cross-site Scripting in eZ Platform Rich Text Field Type
High
CVE-2024-43369
Persistent Cross-site Scripting in Ibexa RichText Field Type
Medium
CVE-2024-39406
Magento Open Source Path Traversal vulnerability
High
CVE-2024-39403
Magento Stored Cross-Site Scripting (XSS) vulnerability
High
CVE-2024-39399
Magento Path Traversal vulnerability
High
CVE-2024-39398
Magento does not properly restrict excessive authentication attempts
Medium
CVE-2024-42357
Shopware vulnerable to blind SQL-injection in DAL aggregations
High
CVE-2024-42356
Shopware vulnerable to Server Side Template Injection in Twig using Context functions
High
CVE-2024-42355
Shopware vulnerable to Server Side Template Injection in Twig using deprecation silence tag
Medium
CVE-2024-42354
Shopware vulnerable to Improper Access Control with ManyToMany associations in store-api
Unrated
CVE-2024-13265
drupal/opigno_learning_path - SA-CONTRIB-2024-029
Unrated
CVE-2024-13264
drupal/opigno_module - SA-CONTRIB-2024-028
Medium
CVE-2024-41381
Microweber Cross Site Scripting (XSS) vulnerability
Medium
CVE-2024-41380
Microweber Cross Site Scripting (XSS) vulnerability
Low
CVE-2024-41811
ipl/web's `ipl\Web\Common\CsrfCounterMeasure` is susceptible to CSRF
Medium
ghsa-gc5h-6jx9-q2qh
eZ Platform Admin UI vulnerable to DOM-based Cross-site Scripting in file upload widget
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.