Critical
CVE-2024-0057
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,436
High
CVE-2024-22188
TYPO3 Install Tool vulnerable to Code Execution
High
CVE-2024-21386
Microsoft Security Advisory CVE-2024-21386: .NET Denial of Service Vulnerability
Medium
CVE-2023-30451
Path Traversal in TYPO3 File Abstraction Layer Storages
High
CVE-2024-25121
TYPO3 vulnerable to Improper Access Control Persisting File Abstraction Layer Entities via Data Handler
Medium
CVE-2024-25120
TYPO3 vulnerable to Improper Access Control of Resources Referenced by t3:// URI Scheme
Medium
CVE-2024-25119
TYPO3 Install Tool vulnerable to Information Disclosure of Encryption Key
Medium
CVE-2024-24751
derhansen/sf_event_mgt vulnerable to Broken Access Control in Backend Module
Medium
CVE-2024-25118
TYPO3 Backend Forms vulnerable to Information Disclosure of Hashed Passwords
Medium
CVE-2024-1163
mapshaper Path Traversal vulnerability
Medium
CVE-2024-0838
Happy Addons for Elementor <= 3.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-0561
Ultimate Posts Widget <= 2.3.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-1389
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.11.1 - Missing Authorization via pms_stripe_connect_handle_authorization_return
Critical
CVE-2024-25600
Bricks <= 1.9.6 - Unauthenticated Remote Code Execution
Medium
CVE-2024-1273
Starbox <= 3.4.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1282
Email Encoder – Protect Email Addresses and Phone Numbers <= 2.2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-0438
Happy Addons for Elementor <= 3.10.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1390
Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction <= 2.11.1 - Missing Authorization via creating_pricing_table_page
Medium
CVE-2024-25112
Exiv2 has a denial of service due to unbounded recursion in QuickTimeVideo::multipleEntriesDecoder
Medium
CVE-2024-24826
Exiv2 has an out-of-bounds read in QuickTimeVideo::NikonTagsDecoder
Medium
ghsa-6ccv-8fgf-cjpw
Drupal core Denial of Service vulnerability
Medium
CVE-2024-1459
Undertow Path Traversal vulnerability
Low
CVE-2021-4437
lambda-middleware Inefficient Regular Expression Complexity vulnerability
Critical
CVE-2024-25108
Pixelfed doesn't check OAuth Scopes in API routes, giving elevated permissions
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.