Low
CVE-2024-51755
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Low
CVE-2024-51754
Twig has unguarded calls to `__toString()` when nesting an object into an array
Medium
CVE-2024-50637
UnoPim Cross-site Scripting vulnerability
Unrated
CVE-2024-13292
drupal/tooltip - SA-CONTRIB-2024-058
Critical
CVE-2024-51757
happy-dom allows for server side code to be executed by a <script> tag
High
CVE-2024-51736
Symfony vulnerable to command execution hijack on Windows with Process class
Low
CVE-2024-50345
Symfony vulnerable to open redirect via browser-sanitized URLs
Low
CVE-2024-50343
Symfony has an incorrect response from Validator when input ends with `\n`
Low
CVE-2024-50342
Symfony allows internal address and port enumeration by NoPrivateNetworkHttpClient
Critical
CVE-2024-10081
codechecker vulnerable to authentication bypass when using specifically crafted URLs
Critical
CVE-2024-10082
codechecker authentication method confusion vulnerability allows logging in as the built-in root user from an external service
Low
CVE-2024-50341
Symfony's `Security::login` does not take into account custom `user_checker`
Medium
CVE-2024-50340
Symfony allows changing the environment through a query
Medium
CVE-2024-10186
Event Post <= 5.9.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via events_cal Shortcode
Medium
CVE-2024-10168
Active Products Tables for WooCommerce. Use constructor to create tables <= 1.0.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via woot_button Shortcode
Medium
CVE-2024-8323
Pricing Tables WordPress Plugin – Easy Pricing Tables <= 3.2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via fontFamily Attribute
Critical
CVE-2024-8614
WP JobSearch <= 2.6.7 - Authenticated (Subscriber+) Arbitrary File Upload
Critical
CVE-2024-8615
WP JobSearch <= 2.6.7 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-51493
OctoPrint has API key access in settings without reauthentication
Medium
CVE-2024-49377
OctoPrint Vulnerable to Reflected XSS in Jinja2 Templates
High
CVE-2024-51132
HAPI FHIR XML External Entity (XXE) vulnerability
Medium
CVE-2024-6626
EleForms – All In One Form Integration including DB for Elementor <= 2.9.9.9 - Missing Authorization
Critical
CVE-2024-9307
mFolio Lite <= 1.2.1 - Missing Authorization to Authenticated (Author+) File Upload via EXE and SVG Files
Low
CVE-2024-51753
@workos-inc/authkit-remix refresh tokens are logged when the debug flag is enabled
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.