Medium
CVE-2024-26470
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,120
Reset filters
Medium
CVE-2024-26318
Cross-site Scripting in Serenity
Critical
CVE-2024-0057
NuGet Client Security Feature Bypass Vulnerability
High
CVE-2024-21386
Microsoft Security Advisory CVE-2024-21386: .NET Denial of Service Vulnerability
High
ghsa-8v28-3g86-chj5
PanelSwWix4.Sdk .be TEMP folder is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges
High
ghsa-259p-rvjx-ffwg
Panel::Software Customized WiX .be TEMP folder is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges
High
CVE-2024-24810
WiX Toolset's .be TEMP folder is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges
Medium
CVE-2022-34716
.NET Information Disclosure Vulnerability
High
ghsa-jcmq-5rrv-j2g4
PowerShell is subject to remote code execution vulnerability
High
CVE-2024-23838
TrueLayer.Client SSRF when fetching payment or payment provider
Medium
CVE-2024-21319
Microsoft ASP.NET Core project templates vulnerable to denial of service
High
CVE-2024-0056
Microsoft.Data.SqlClient and System.Data.SqlClient vulnerable to SQL Data Provider Security Feature Bypass
High
CVE-2024-21643
Microsoft.IdentityModel.Protocols.SignedHttpRequest remote code execution vulnerability
Medium
CVE-2023-51652
OWASP.AntiSamy mXSS when preserving comments
Medium
CVE-2023-51662
Snowflake Connector .NET does not properly check the Certificate Revocation List (CRL)
Low
CVE-2023-49279
Stored XSS via SVG File Upload
Low
CVE-2023-49278
Brute force exploit can be used to collect valid usernames
Low
CVE-2023-49274
SMTP misconfiguration leading to "Forgot Password" exploit that leaks registered user email.
Medium
CVE-2023-49273
Privilege Escalation using Spoofing
Low
CVE-2023-49089
Using the directory back payload (“/../”) in a package name allows placement of package in other folders.
Medium
CVE-2023-48313
DOM-XSS on Backoffice login screen.
Low
CVE-2023-48227
Backoffice User can bypass "Publish" restriction
Low
CVE-2023-38694
Possible injection of HTML into user invite mails
Low
ghsa-w4x6-hh3x-wjrx
Stale copy of the public suffix list
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.