Medium
CVE-2024-34357
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,070
Reset filters
Medium
CVE-2024-34356
TYPO3 vulnerable to Cross-Site Scripting in the Form Manager Module
Low
CVE-2024-34355
TYPO3 vulnerable to an HTML Injection in the History Module
Medium
CVE-2024-34914
PHP Censor uses a weak hashing algorithm for the remember me key
Critical
CVE-2024-4825
Cockpit CMS contains an arbitrary file upload vulenrability
Medium
CVE-2024-34081
Mantis Bug Tracker (MantisBT) vulnerable to cross-site scripting
Medium
CVE-2024-34080
MantisBT Vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
High
CVE-2024-34077
Mantis Bug Tracker (MantisBT) allows user account takeover in the signup/reset password process
Medium
CVE-2024-29376
Sylius has potential Cross Site Scripting vulnerability via the "Province" field in the Checkout and Address Book
Medium
CVE-2024-34349
Sylius potentially vulnerable to Cross Site Scripting via "Name" field (Taxons, Products, Options, Variants) in Admin Panel
Critical
CVE-2024-34070
Blind XSS Leading to Froxlor Application Compromise
Low
CVE-2024-4596
Kimai information disclosure vulnerability
High
CVE-2024-34515
image-optimizer allows PHAR deserialization
Medium
CVE-2024-34500
MediaWiki UnlinkedWikibase Cross-site Scripting vulnerability
Medium
CVE-2024-34467
ThinkPHP Cross-Site Scripting Vulnerability
Critical
CVE-2024-34461
Zenario uses Twig filters insecurely in the Twig Snippet plugin
Medium
CVE-2024-34460
Zenario's Tree Explorer tool from Organizer affected by Cross-site Scripting
Medium
CVE-2024-34067
Pterodactyl panel's admin area vulnerable to Cross-site Scripting
Medium
CVE-2024-33851
mdanter/ecc affected by timing vulnerability in cryptographic side-channels
Medium
CVE-2024-31828
Lavalite CMS Cross Site Scripting vulnerability
Medium
CVE-2024-33670
Passbolt API allows HTML injection
Critical
ghsa-346h-749j-r28w
PHPECC vulnerable to multiple cryptographic side-channel attacks
Medium
ghsa-vjwg-28gv-pm8h
Pimcore TinyMCE Bundle - tinymce CVE-2024-29203, CVE-2024-29881
Unrated
CVE-2024-13254
drupal/rest_views - SA-CONTRIB-2024-018
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.