Medium
ghsa-g5vj-wj9x-4jg9
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 388
Reset filters
Medium
ghsa-7wh8-jrq7-p27f
SimpleSAMLphp exposes credentials in session storage
High
ghsa-vgxh-x8jv-hmff
silverstripe/framework code execution vulnerability
High
ghsa-jwvj-pwww-3mj5
laravel framework Unexpected database bindings via requests
Medium
ghsa-rj3w-99gc-8j58
Laravel Risk of mass-assignment vulnerabilities
Medium
ghsa-cc2w-ghc5-m5qr
Laravel Risk of mass-assignment vulnerabilities
Medium
ghsa-8jp9-mpv9-98rj
amphp/http-client Header leakage on cross-domain redirects
Medium
CVE-2024-34349
Sylius potentially vulnerable to Cross Site Scripting via "Name" field (Taxons, Products, Options, Variants) in Admin Panel
Medium
CVE-2024-29203
TinyMCE Cross-Site Scripting (XSS) vulnerability in handling iframes
Medium
CVE-2024-28861
Gadget chain in Symfony 1 due to uncontrolled unserialized input in sfNamespacedParameterHolder
High
CVE-2024-28119
Server Side Template Injection (SSTI) via Twig escape handler
High
CVE-2024-28118
Server Side Template Injection (SSTI)
High
CVE-2024-28117
Server Side Template Injection (SSTI)
High
CVE-2024-28116
Server-Side Template Injection (SSTI) with Grav CMS security sandbox bypass
High
CVE-2024-27921
Grav File Upload Path Traversal
Medium
CVE-2024-28859
Gadget chain in Symfony 1 due to vulnerable Swift Mailer dependency
High
CVE-2024-58381
PocketMine-MP server crash with certain invalid JSON payloads in `LoginPacket` due to dependency vulnerability (3rd time)
Medium
CVE-2024-25117
php-svg-lib lacks path validation on font through SVG inline styles
High
CVE-2024-25625
Pimcore Host Header Injection in user invitation link
Medium
CVE-2023-30451
Path Traversal in TYPO3 File Abstraction Layer Storages
Low
CVE-2024-24754
Bref vulnerable to Body Parsing Inconsistency in Event-Driven Functions
Medium
CVE-2024-24752
Bref's Uploaded Files Not Deleted in Event-Driven Functions
Medium
CVE-2023-50251
Denial of service caused by infinite recursion when parsing SVG document
High
CVE-2023-46245
Kimai (Authenticated) SSTI to RCE by Uploading a Malicious Twig File
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.