Medium
CVE-2024-35681
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
High
CVE-2024-5329
Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 1.5.109 - Authenticated (Contributor+) Blind SQL Injection via data[addonID] Parameter
High
ghsa-xjw3-5r5c-m5ph
typo3 Security fix for Flow Swift Mailer package
Medium
ghsa-m2hp-5x78-74mg
Insecure Unserialize Vulnerability in FLOW3
Medium
CVE-2024-5259
MultiVendorX Marketplace – WooCommerce MultiVendor Marketplace Solution <= 4.1.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via hover_animation Parameter
Medium
CVE-2024-5221
Qi Blocks <= 1.2.9 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-5665
Login/Signup Popup ( Inline Form + Woocommerce ) 2.7.1 - 2.7.2 - Missing Authorization to Arbitrary Options Exposure
High
ghsa-g4xv-r3qw-v3q2
typo3 Information Disclosure Security Note
Medium
ghsa-2p4f-vc9q-r5vp
Typo3 Arbitrary file upload and XML External Entity processing
Medium
ghsa-4v5g-8pq2-32m2
By-passing Protection of PharStreamWrapper Interceptor
Medium
ghsa-r6mm-wmhf-849m
Time-Based Information Disclosure Vulnerability in Flow
Medium
ghsa-wr3c-6c22-m9v6
Privilege Escalation in TYPO3 Neos
High
ghsa-vh6j-wv25-8qxr
Flow Bugfix Releases for Entity Security
High
ghsa-4542-p56h-8xww
Cross-Site Scripting (XSS) vulnerabilities in Neos
Medium
ghsa-259v-xm34-p7fr
Typo3 Cross-Site Scripting in Language Pack Handling
Medium
ghsa-f5rr-9r84-wwqf
Typo3 Broken Access Control in Import Module
Low
ghsa-h934-f4m4-wc8x
Typo3 Information Disclosure in Page Tree
Medium
ghsa-hww5-6x85-mc24
Typo3 Arbitrary Code Execution and Cross-Site Scripting in Backend API
Medium
ghsa-qr5f-6fcv-w69q
Typo3 Security Misconfiguration in Frontend Session Handling
Medium
ghsa-g9rv-6g56-65h8
Typo3 Security Misconfiguration in User Session Handling
Medium
ghsa-q9c4-9v5m-597p
Typo3 Information Disclosure in Backend User Interface
Medium
ghsa-m96r-7vqm-j95g
Typo3 Information Disclosure in User Authentication
Medium
ghsa-v4qr-8h2v-qpjx
Cross-Site Scripting in TYPO3 CMS Backend
Medium
ghsa-5gr6-97fv-52cc
Cross-Site Scripting in TYPO3 CMS
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.