High
CVE-2024-56522
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,070
Reset filters
Medium
CVE-2024-56520
tecnickcom/tc-lib-pdf-font mishandles fonts
Medium
CVE-2024-56519
TCPDF lacks SVG sanitization
High
CVE-2024-56521
TCPDF missing certificate validation
High
CVE-2024-56361
lgsl Stored Cross-Site Scripting vulnerability
Medium
CVE-2024-56364
Cross-site Scripting vulnerability in SimpleXLSXEx::readThemeColors, SimpleXLSXEx::getColorValue and SimpleXLSX::toHTMLEx
High
CVE-2024-56329
Socialstream has a Potential Account Takeover Vulnerability in Social Account Linking Due to Missing User Consent After OAuth Callback
Medium
CVE-2024-21549
Browsershot Improper Input Validation vulnerability
Critical
Exploited in attacks
CVE-2024-56145
Craft CMS has potential RCE when PHP `register_argc_argv` config setting is enabled
High
CVE-2024-21546
UniSharp Laravel Filemanager Code Injection vulnerability
High
CVE-2024-21547
Spatie Browsershot Directory Traversal vulnerability
Medium
CVE-2024-55889
thorsten/phpmyfaq Unintended File Download Triggered by Embedded Frames
High
CVE-2024-55661
Laravel Pulse Allows Remote Code Execution via Unprotected Query Method
Medium
CVE-2024-21544
Browsershot Local File Inclusion
Medium
CVE-2024-55878
Cross-site Scripting vulnerability in SimpleXLSXEx::readXfs and SimpeXLSX::toHTMLEx
Unrated
CVE-2024-13311
drupal/all_extensions - SA-CONTRIB-2024-075
Unrated
CVE-2024-13310
drupal/git_utils - SA-CONTRIB-2024-074
Unrated
CVE-2024-13309
drupal/login_disable - SA-CONTRIB-2024-073
Unrated
CVE-2024-13308
drupal/browser_back_button - SA-CONTRIB-2024-072
Medium
CVE-2024-11184
WP Enabled SVG <= 0.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG
High
CVE-2024-58382
league/commonmark's quadratic complexity bugs may lead to a denial of service
High
CVE-2024-54149
Winter CMS Modules allows a sandbox bypass in Twig templates leading to data modification and deletion
High
CVE-2024-54141
phpMyFAQ Generates an Error Message Containing Sensitive Information if database server is not available
Medium
CVE-2024-53457
LibreNMS stored cross-site scripting (XSS) vulnerability in the Device Settings section
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.