Medium
ghsa-gp6m-fq6h-cjcx
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,406
Reset filters
Medium
CVE-2024-27087
Kirby vulnerable to Cross-site scripting (XSS) in the link field "Custom" type
Medium
CVE-2024-26481
Kirby vulnerable to self cross-site scripting (self-XSS) in the URL field
Medium
CVE-2024-26483
Kirby vulnerable to unrestricted file upload of user avatar images
Critical
ghsa-97m3-52wr-xvv2
Dompdf's usage of vulnerable version of phenx/php-svg-lib leads to restriction bypass and potential RCE
Medium
CVE-2024-25117
php-svg-lib lacks path validation on font through SVG inline styles
High
CVE-2024-25625
Pimcore Host Header Injection in user invitation link
High
CVE-2024-23830
MantisBT Host Header Injection vulnerability
Medium
CVE-2024-25983
Authorization Bypass in moodle
High
CVE-2024-25298
Code injection in REDAXO
Medium
CVE-2023-49508
YetiForceCRM Directory Traversal vulnerability
High
CVE-2024-20719
Magento Open Source allows Cross-Site Scripting (XSS)
Medium
CVE-2024-20718
Magento Open Source allows Cross-Site Request Forgery (CSRF)
Unrated
CVE-2024-13245
drupal/ckeditor_lts - SA-CONTRIB-2024-009
High
CVE-2024-22188
TYPO3 Install Tool vulnerable to Code Execution
Medium
CVE-2023-30451
Path Traversal in TYPO3 File Abstraction Layer Storages
Medium
CVE-2024-25120
TYPO3 vulnerable to Improper Access Control of Resources Referenced by t3:// URI Scheme
Medium
CVE-2024-25119
TYPO3 Install Tool vulnerable to Information Disclosure of Encryption Key
Medium
CVE-2024-25118
TYPO3 Backend Forms vulnerable to Information Disclosure of Hashed Passwords
Medium
ghsa-6ccv-8fgf-cjpw
Drupal core Denial of Service vulnerability
Critical
CVE-2024-25108
Pixelfed doesn't check OAuth Scopes in API routes, giving elevated permissions
High
CVE-2024-24821
Composer code execution and possible privilege escalation via compromised InstalledVersions.php or installed.php
Medium
CVE-2024-24822
Pimcore Admin Classic Bundle permissions are not getting checked when working with tags
Unrated
CVE-2024-13244
drupal/migrate_tools - SA-CONTRIB-2024-008
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.