Medium
ghsa-65xh-hh78-6454
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,406
Reset filters
Medium
ghsa-gm98-g2wf-7c68
amphp/artax Cookie leakage to wrong origins and non-restricted cookie acceptance
Medium
ghsa-8jp9-mpv9-98rj
amphp/http-client Header leakage on cross-domain redirects
Medium
ghsa-87mp-xc4x-x8rh
asymmetricrypt/asymmetricrypt Padding Oracle Vulnerability in RSA Encryption
Critical
CVE-2020-35125
Mautic is vulnerable to XSS vulnerability
High
CVE-2024-34082
Grav Vulnerable to Arbitrary File Read to Account Takeover
Medium
CVE-2024-31556
Reportico Web fails to invalidate cookies upon logout
Critical
CVE-2024-34716
PrestaShop cross-site scripting via customer contact form in FO, through file upload
Medium
CVE-2024-34358
TYPO3 vulnerable to an Uncontrolled Resource Consumption in the ShowImageController
Medium
CVE-2024-34357
TYPO3 vulnerable to Cross-Site Scripting in the ShowImageController
Medium
CVE-2024-34914
PHP Censor uses a weak hashing algorithm for the remember me key
Critical
CVE-2024-4825
Cockpit CMS contains an arbitrary file upload vulenrability
Medium
CVE-2024-34081
Mantis Bug Tracker (MantisBT) vulnerable to cross-site scripting
Medium
CVE-2024-34080
MantisBT Vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
High
CVE-2024-34077
Mantis Bug Tracker (MantisBT) allows user account takeover in the signup/reset password process
Medium
CVE-2024-29376
Sylius has potential Cross Site Scripting vulnerability via the "Province" field in the Checkout and Address Book
Medium
CVE-2024-34349
Sylius potentially vulnerable to Cross Site Scripting via "Name" field (Taxons, Products, Options, Variants) in Admin Panel
Critical
CVE-2024-34070
Blind XSS Leading to Froxlor Application Compromise
Low
CVE-2024-4596
Kimai information disclosure vulnerability
Medium
CVE-2024-34067
Pterodactyl panel's admin area vulnerable to Cross-site Scripting
Medium
CVE-2024-33851
mdanter/ecc affected by timing vulnerability in cryptographic side-channels
Medium
CVE-2024-31828
Lavalite CMS Cross Site Scripting vulnerability
Critical
ghsa-346h-749j-r28w
PHPECC vulnerable to multiple cryptographic side-channel attacks
Medium
ghsa-vjwg-28gv-pm8h
Pimcore TinyMCE Bundle - tinymce CVE-2024-29203, CVE-2024-29881
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.