Medium
CVE-2023-1932
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2023-1973
Undertow Denial of Service vulnerability
High
CVE-2024-38286
Apache Tomcat Allocation of Resources Without Limits or Throttling vulnerability
Medium
CVE-2024-10473
Logo Slider <= 4.1.0 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-10896
Logo Slider <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10493
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) <= 5.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10510
adBuddy+ (AdBlocker Detection) by NetfunkDesign <= 1.1.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-8442
Prime Slider - Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider <= 3.15.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via Blog Widget
Medium
CVE-2024-51751
Gradio vulnerable to arbitrary file read with File and UploadButton components
Low
CVE-2024-51755
Twig has unguarded calls to `__isset()` and to array-accesses when the sandbox is enabled
Low
CVE-2024-51754
Twig has unguarded calls to `__toString()` when nesting an object into an array
Medium
CVE-2024-50637
UnoPim Cross-site Scripting vulnerability
Unrated
CVE-2024-13292
drupal/tooltip - SA-CONTRIB-2024-058
Critical
CVE-2024-51757
happy-dom allows for server side code to be executed by a <script> tag
High
CVE-2024-51736
Symfony vulnerable to command execution hijack on Windows with Process class
Low
CVE-2024-50345
Symfony vulnerable to open redirect via browser-sanitized URLs
Low
CVE-2024-50343
Symfony has an incorrect response from Validator when input ends with `\n`
Low
CVE-2024-50342
Symfony allows internal address and port enumeration by NoPrivateNetworkHttpClient
Critical
CVE-2024-10081
codechecker vulnerable to authentication bypass when using specifically crafted URLs
Critical
CVE-2024-10082
codechecker authentication method confusion vulnerability allows logging in as the built-in root user from an external service
Low
CVE-2024-50341
Symfony's `Security::login` does not take into account custom `user_checker`
Medium
CVE-2024-50340
Symfony allows changing the environment through a query
Medium
CVE-2024-10186
Event Post <= 5.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via events_cal Shortcode
Medium
CVE-2024-10168
Active Products Tables for WooCommerce. Use constructor to create tables <= 1.0.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via woot_button Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.