Medium
ghsa-7v7m-pcw5-h3cg
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,216
Reset filters
Medium
ghsa-ww6p-q26w-fr6m
phpxmlrpc/extra XSS in class documenting_xmlrpc_server
Medium
ghsa-qm5v-pj64-852j
Passbolt Api Tabnabbing when opening URI with menu "Open URI in a new tab"
High
ghsa-2f46-4xjm-73x5
Passbolt API Stored XSS on first/last name during setup
High
ghsa-cv5c-2qv5-w2m2
Passbolt Api Remote code execution
High
ghsa-6cj3-rc4p-f38f
Cross-site Scripting vulnerabilities in Neos
Medium
ghsa-5vv7-j593-mgjc
Neos Flow Arbitrary file upload and XML External Entity processing
High
ghsa-wq8p-mqvg-2p5h
laravel framework SQL Injection via limit and offset functions
High
ghsa-2gq2-m628-33xp
gregwar/rst Local File Inclusion Vulnerability
High
ghsa-9895-26wr-4fgv
EZsystems Remote code execution in file uploads
Medium
ghsa-pqjm-xcp8-wgmm
Ez Platform and Legacy are prone to an insecure interpretation of PHP/PHAR uploads
High
ghsa-3vwr-jj4f-h98x
eZ Publish Remote code execution in file uploads
Critical
ghsa-wxxw-5gq6-j2g5
contao/core Insufficient input validation allows for code injection and remote execution
High
CVE-2024-34082
Grav Vulnerable to Arbitrary File Read to Account Takeover
Medium
CVE-2024-34358
TYPO3 vulnerable to an Uncontrolled Resource Consumption in the ShowImageController
Critical
CVE-2024-4825
Cockpit CMS contains an arbitrary file upload vulenrability
Critical
CVE-2024-34070
Blind XSS Leading to Froxlor Application Compromise
High
CVE-2024-23817
Dolibarr Application Home Page has HTML injection vulnerability
Medium
CVE-2022-25777
Mautic: MST-48 Server-Side Request Forgery in Asset section
High
CVE-2024-2653
AMPHP Denial of Service via HTTP/2 CONTINUATION Frames
Critical
CVE-2021-27312
Gleez Cms Server Side Request Forgery (SSRF) vulnerability
High
CVE-2024-29686
Winter CMS Server-Side Template Injection (SSTI) vulnerability
High
CVE-2024-29904
CodeIgniter4 DoS Vulnerability
High
CVE-2024-28107
phpMyFAQ SQL injections at insertentry & saveentry
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.