Medium
CVE-2022-4533
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2024-9838
Auto Affiliate Links <= 6.4.6 - Authenticated (Admin+) SQL Injection
Medium
CVE-2024-42404
Welcart e-Commerce <= 2.11.1 - Authenticated (Admin+) SQL Injection
Medium
CVE-2024-8850
MC4WP: Mailchimp for WordPress 4.9.9 - 4.9.16 - Reflected Cross-Site Scripting
Medium
CVE-2024-4629
Keycloak Services has a potential bypass of brute force protection
High
CVE-2024-46982
Next.js Cache Poisoning
Medium
CVE-2024-46976
@backstage/plugin-techdocs-backend vulnerable to circumvention of cross site scripting protection
High
CVE-2024-8946
A vulnerability was found in MicroPython 1.23.0. It has been classified as critical. Affected is the function mp_vfs_umount of the file extmod/vfs.c of the component VFS Unmount Handler. The manipulat
Low
CVE-2024-45384
druid-pac4j, Apache Druid extension, has Padding Oracle vulnerability
Low
CVE-2024-45537
Apache Druid: Users can provide MySQL JDBC properties not on allow list
High
CVE-2024-8947
A vulnerability was found in MicroPython 1.22.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file py/objarray.c. The manipulation leads to use a
High
CVE-2024-8948
A vulnerability was found in MicroPython 1.23.0. It has been rated as critical. Affected by this issue is the function mpz_as_bytes of the file py/objint.c. The manipulation leads to heap-based buffer
Medium
CVE-2024-8660
Concrete CMS stored XSS vulnerability in the "Top Navigator Bar" block
High
CVE-2024-45816
@backstage/plugin-techdocs-backend storage bucket Directory Traversal vulnerability
High
CVE-2024-45815
@backstage/plugin-catalog-backend Prototype Pollution vulnerability
Critical
ghsa-2gh6-wc3m-g37f
hermes-management is vulnerable to RCE due to Apache commons-jxpath
Medium
CVE-2024-45812
Vite DOM Clobbering gadget found in vite bundled scripts that leads to XSS
Medium
CVE-2024-45811
Vite's `server.fs.deny` is bypassed when using `?import&raw`
High
ghsa-534c-hcr7-67jg
Kimai has an XXE Leading to Local File Read
Medium
CVE-2024-45803
Wire UI has a JS XSS Vulnerability on route /wireui/button?label=Content
Medium
CVE-2024-47049
czim/file-handling vulnerable to SSRF and directory traversal
Medium
CVE-2024-47047
powermail TYPO3 extension has Insecure Direct Object Reference
Medium
CVE-2024-45612
Contao affected by insert tag injection via canonical URL
Medium
CVE-2024-45604
Contao affected by directory traversal in the file selector widget
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.