Medium
CVE-2024-7300
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,406
Reset filters
Medium
CVE-2024-41109
Pimcore vulnerable to disclosure of system and database information behind /admin firewall
Critical
CVE-2024-38529
Admidio Vulnerable to RCE via Arbitrary File Upload in Message Attachment
Medium
CVE-2024-41373
ICEcoder Path Traversal vulnerability
Medium
CVE-2024-47069
Reflected Cross Site-Scripting (XSS) in Oveleon Cookiebar
High
CVE-2024-40137
Dolibarr ERP CRM vulnerable to remote code execution (RCE)
Medium
CVE-2024-41709
Backdrop CMS does not sufficiently sanitize field labels before they are displayed in certain places
Medium
ghsa-52cw-pvq9-9m5v
Silverstripe uses TinyMCE which allows svg files linked in object tags
High
CVE-2024-40633
Sylius has a security vulnerability via adjustments API endpoint
Medium
CVE-2024-32981
Silverstripe Framework has a Cross-site Scripting vulnerability with encoded payload
Critical
CVE-2024-40624
TorrentPier Deserialization of Untrusted Data vulnerability
Medium
CVE-2024-39912
The FIDO2/Webauthn Support for PHP library allows enumeration of valid usernames
Medium
CVE-2024-39899
PrivateBin allows shortening of URLs for other domains
High
CVE-2024-36676
BookStack Incorrect Access Control vulnerability
Medium
CVE-2024-39325
ai-controller-frontend payment status in basket isn't reset
Medium
CVE-2024-39322
aimeos/ai-admin-jsonadm improper access control vulnerability allows editors to remove required records
Low
CVE-2024-39324
aimeos/ai-admin-graphql improper access control vulnerability allows editors to manage own services
High
CVE-2024-39323
aimeos/ai-admin-graphql improper access control vulnerability allows an editor to modify admin account
Low
CVE-2024-24764
October System module has an Open Redirect for Administrator Accounts
Low
CVE-2024-25637
October System module has a Reflected XSS via X-October-Request-Handler Header
Critical
CVE-2024-37843
Craft CMS SQL injection vulnerability via the GraphQL API endpoint
High
CVE-2024-38516
Aimeos HTML client may potentially reveal sensitive information in error log
High
CVE-2024-21519
Arbitrary File Creation in opencart
Medium
CVE-2024-21515
Cross site scripting in opencart
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.