Medium
CVE-2024-21667
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 853
Reset filters
High
CVE-2024-21627
PrestaShop some attribute not escaped in Validate::isCleanHTML method
Medium
CVE-2023-50251
Denial of service caused by infinite recursion when parsing SVG document
Medium
CVE-2023-48708
Insertion of Sensitive Information into Log
Medium
CVE-2023-46745
LibreNMS vulnerable to rate limiting bypass on login page
High
CVE-2023-47637
Pimcore SQL Injection in Admin Grid Filter API through Multiselect::getFilterConditionExt()
High
CVE-2023-46725
FoodCoopShop Server-Side Request Forgery vulnerability
High
CVE-2023-46245
Kimai (Authenticated) SSTI to RCE by Uploading a Malicious Twig File
Medium
CVE-2023-43792
baserCMS Code Injection Vulnerability in Mail Form Feature
Medium
CVE-2023-43649
baserCMS CSRF vulnerability in Content preview Feature
Medium
CVE-2023-43648
baserCMS Directory Traversal vulnerability in Form submission data management Feature
Medium
CVE-2023-43647
baserCMS Cross-site Scripting vulnerability in File upload Feature
Medium
CVE-2023-29009
baserCMS Cross-site Scripting Vulnerability in Favorites Feature
Critical
CVE-2023-41330
Snappy PHAR deserialization vulnerability
High
CVE-2023-40035
Craft CMS vulnerable to Remote Code Execution via validatePath bypass
High
CVE-2023-40033
Flarum vulnerable to LFI and Blind SSRF via Avatar upload
High
CVE-2023-39527
Possible XSS injection through Validate::isCleanHTML method
Low
CVE-2023-32302
Silverstripe Framework: Members with no password can be created and bypass custom login forms
Medium
CVE-2023-37280
Pimcore admin UI vulnerable to Cross-site Scripting in 2 factor authentication setup page
Critical
CVE-2023-36825
Orchid Deserialization of Untrusted Data vulnerability leads to Remote Code Execution
High
CVE-2018-1000888
Archive_Tar contains Potential RCE if filename starts with phar://
Unrated
drupal-contrib-2023-029
drupal/tacjs - SA-CONTRIB-2023-029
High
CVE-2023-34448
Grav Server-side Template Injection (SSTI) via Twig Default Filters
High
CVE-2023-34253
Grav Server-side Template Injection (SSTI) via Denylist Bypass Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.