High
CVE-2024-27299
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,216
Reset filters
High
CVE-2024-28850
WP Crontrol <= 1.16.1 - Remote Code Execution
Medium
CVE-2024-29186
Slow String Operations via MultiPart Requests in Event-Driven Functions
High
CVE-2024-28119
Server Side Template Injection (SSTI) via Twig escape handler
High
CVE-2024-28118
Server Side Template Injection (SSTI)
High
CVE-2024-28117
Server Side Template Injection (SSTI)
High
CVE-2024-28116
Server-Side Template Injection (SSTI) with Grav CMS security sandbox bypass
High
CVE-2024-27921
Grav File Upload Path Traversal
High
CVE-2024-58381
PocketMine-MP server crash with certain invalid JSON payloads in `LoginPacket` due to dependency vulnerability (3rd time)
High
CVE-2024-58380
PocketMine-MP BookEditPacket crash when inventory slot in the packet is invalid
High
CVE-2024-27923
Remote Code Execution by uploading a phar file using frontmatter
Medium
CVE-2024-27516
livehelperchat Server-Side Template Injection
Medium
CVE-2024-26483
Kirby vulnerable to unrestricted file upload of user avatar images
High
CVE-2022-25377
Appwrite Directory Traversal vulnerability
Critical
CVE-2024-1651
Deserialization of Untrusted Data in Torrentpier
Critical
CVE-2024-25108
Pixelfed doesn't check OAuth Scopes in API routes, giving elevated permissions
Low
CVE-2024-24807
Sulu HTML Injection via Autocomplete Suggestion
Medium
CVE-2024-22208
phpMyFAQ sharing FAQ functionality can easily be abused for phishing purposes
Low
CVE-2024-24754
Bref vulnerable to Body Parsing Inconsistency in Event-Driven Functions
Medium
CVE-2024-24753
Bref Doesn't Support Multiple Value Headers in ApiGatewayFormatV2
Medium
CVE-2024-24752
Bref's Uploaded Files Not Deleted in Event-Driven Functions
High
CVE-2024-23648
Host header injection in the password reset
Medium
CVE-2023-6551
class.upload.php allows cross-site scripting attacks via uploaded files
High
CVE-2023-50256
Froxlor username/surname AND company field Bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.