Medium
CVE-2024-7300
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,070
Reset filters
High
CVE-2024-38909
Studio 42 elFinder vulnerable to Incorrect Access Control
Medium
CVE-2024-41109
Pimcore vulnerable to disclosure of system and database information behind /admin firewall
Medium
CVE-2024-41676
Magento LTS vulnerable to stored Cross-site Scripting (XSS) in admin system configs
Critical
CVE-2024-38529
Admidio Vulnerable to RCE via Arbitrary File Upload in Message Attachment
Critical
CVE-2024-37906
Admidio has Blind SQL Injection in ecard_send.php
Critical
CVE-2024-41637
RaspAP allows an attacker to escalate privileges
High
CVE-2024-41374
ICEcoder vulnerable to Cross Site Scripting
High
CVE-2024-41375
ICEcoder vulnerable to Cross Site Scripting
Medium
CVE-2024-41373
ICEcoder Path Traversal vulnerability
Medium
CVE-2024-47069
Reflected Cross Site-Scripting (XSS) in Oveleon Cookiebar
Medium
CVE-2024-41800
Craft CMS Allows TOTP Token To Stay Valid After Use
High
CVE-2024-40137
Dolibarr ERP CRM vulnerable to remote code execution (RCE)
Medium
CVE-2024-41709
Backdrop CMS does not sufficiently sanitize field labels before they are displayed in certain places
Low
CVE-2024-41597
ProcessWire Cross Site Request Forgery vulnerability
High
CVE-2024-40400
Automad arbitrary file upload vulnerability
Medium
CVE-2024-36694
openCart Server-Side Template Injection (SSTI) vulnerability
Medium
ghsa-52cw-pvq9-9m5v
Silverstripe uses TinyMCE which allows svg files linked in object tags
High
CVE-2024-40633
Sylius has a security vulnerability via adjustments API endpoint
Medium
CVE-2024-32981
Silverstripe Framework has a Cross-site Scripting vulnerability with encoded payload
Medium
CVE-2024-29885
Silverstripe Reports are still accessible even when `canView()` returns false
Critical
CVE-2024-40624
TorrentPier Deserialization of Untrusted Data vulnerability
Medium
CVE-2024-39912
The FIDO2/Webauthn Support for PHP library allows enumeration of valid usernames
Medium
CVE-2024-39899
PrivateBin allows shortening of URLs for other domains
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.