Medium
CVE-2024-30262
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,070
Reset filters
High
CVE-2024-28235
Contao: Possible cookie sharing with external domains while checking protected pages for broken links
Medium
CVE-2024-31447
Shopware Improper Session Handling in store-api account logout
Low
CVE-2024-3180
Concrete CMS Stored XSS in blocks of type file
Low
CVE-2024-3181
Concrete CMS Stored XSS in the Search Field
Low
CVE-2024-3179
Concrete CMS Stored XSS in the Custom Class page editing
Low
CVE-2024-3178
Concrete CMS Cross-site Scripting (XSS) in the Advanced File Search Filter
Low
CVE-2024-2753
Concrete CMS Stored XSS on the calendar color settings screen
High
ghsa-w8gf-g2vq-j2f4
amphp/http-client Denial of Service via HTTP/2 CONTINUATION Frames
High
CVE-2024-2653
AMPHP Denial of Service via HTTP/2 CONTINUATION Frames
Medium
CVE-2024-29477
Dolibarr ERP CRM Code Injection vulnerability during installation
Critical
CVE-2021-27312
Gleez Cms Server Side Request Forgery (SSRF) vulnerability
Medium
CVE-2024-30173
OpenID Connect Authentication (oidc) Typo3 extension Authentication Bypass
High
CVE-2024-3137
UVDesk Community Helpdesk Improper Privilege Management
Low
CVE-2024-3138
RosarioSIS cross site scripting vulnerability
High
CVE-2024-23117
Centreon updateContactServiceCommands SQL Injection Remote Code Execution Vulnerability
High
CVE-2024-0637
Centreon updateDirectory SQL Injection Remote Code Execution Vulnerability
High
CVE-2024-23119
Centreon insertGraphTemplate SQL Injection Remote Code Execution Vulnerability
High
CVE-2024-23118
Centreon updateContactHostCommands SQL Injection Remote Code Execution Vulnerability
High
CVE-2024-23116
Centreon updateLCARelation SQL Injection Remote Code Execution Vulnerability
High
CVE-2024-23115
Centreon updateGroups SQL Injection Remote Code Execution Vulnerability
Medium
CVE-2024-29200
Kimai API returns timesheet entries a user should not be authorized to view
High
CVE-2024-29686
Winter CMS Server-Side Template Injection (SSTI) vulnerability
High
CVE-2024-29904
CodeIgniter4 DoS Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.