Low
CVE-2023-49337
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,071
Reset filters
Medium
CVE-2023-48650
Concrete CMS Stored XSS in Layout Preset Name
Unrated
CVE-2024-13250
drupal/symfony_mailer_lite - SA-CONTRIB-2024-014
Unrated
CVE-2024-13248
drupal/private_content - SA-CONTRIB-2024-012
Unrated
CVE-2024-13247
drupal/coffee - SA-CONTRIB-2024-011
Medium
CVE-2024-22723
Webtrees Path Traversal vulnerability
Medium
ghsa-gp6m-fq6h-cjcx
Magento LTS vulnerable to stored XSS in admin file form
Medium
CVE-2024-25399
Subrion CMS vulnerable to Cross Site Scripting
High
CVE-2023-36237
Bagisto Cross-Site Request Forgery vulnerability
Medium
CVE-2024-27087
Kirby vulnerable to Cross-site scripting (XSS) in the link field "Custom" type
Medium
CVE-2024-26481
Kirby vulnerable to self cross-site scripting (self-XSS) in the URL field
Medium
CVE-2024-26483
Kirby vulnerable to unrestricted file upload of user avatar images
High
CVE-2022-25377
Appwrite Directory Traversal vulnerability
Medium
CVE-2023-44379
baserCMS Cross-site Scripting vulnerability in Site search Feature
Medium
CVE-2023-51450
baserCMS OS command injection vulnerability in Installer
Medium
CVE-2024-26128
baserCMS Cross-site Scripting vulnerability in Content Management
Critical
ghsa-97m3-52wr-xvv2
Dompdf's usage of vulnerable version of phenx/php-svg-lib leads to restriction bypass and potential RCE
Medium
CVE-2024-25876
Enhavo Cross-site Scripting vulnerability
Medium
CVE-2024-25874
Enhavo Cross-site Scripting vulnerability
Medium
CVE-2024-25875
Enhavo Cross-site Scripting vulnerability
Medium
ghsa-gj48-w74w-8gvm
Path Traversal in TYPO3 Core
Medium
CVE-2024-25117
php-svg-lib lacks path validation on font through SVG inline styles
Unrated
CVE-2024-13246
drupal/node_access_rebuild_progressive - SA-CONTRIB-2024-010
Medium
CVE-2024-26129
Path disclosure in JavaScript variable
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.