Medium
CVE-2024-5222
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
High
CVE-2024-36128
Directus is soft-locked by providing a string value to random string util
Medium
CVE-2024-1164
Brizy – Page Builder <= 2.4.43 - Authenticated(Contributor+) Stored Cross-Site Scripting via Form Functionality
Medium
CVE-2024-36124
iq80 Snappy out-of-bounds read when uncompressing data, leading to JVM crash
High
CVE-2024-2087
Brizy – Page Builder <= 2.4.43 - Unauthenticated Stored Cross-Site Scripting via Form
High
CVE-2024-3667
Brizy – Page Builder <= 2.4.43 - Authenticated (Contributor+) Store Cross-Site Scripting via Widget Link To URL
High
CVE-2024-32871
Flooding Server with Thumbnail files
Medium
CVE-2024-1161
Brizy – Page Builder <= 2.4.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via Custom Attributes
High
CVE-2024-36120
javascript-deobfuscator crafted payload can lead to code execution
Medium
ghsa-pmxp-7224-h794
Denial of Service (DoS) attack possibility in TYPO3 component Indexed Search
Medium
ghsa-wrpf-2x8h-82gr
Typo3 Arbitrary File Disclosure in Form Component
Medium
ghsa-8j9v-4hhh-x43c
Cross-Site Scripting (XSS) in TYPO3 component CSS styled content
High
ghsa-qffc-gwpp-m2xr
XML External Entity (XXE) Processing in TYPO3 Core
Medium
ghsa-3jxq-5xhh-9jr3
Cross-Site Scripting (XSS) in TYPO3 component Backend
Medium
CVE-2024-5483
LearnPress – WordPress LMS Plugin <= 4.2.6.8 - Basic Information Disclosure via JSON API
High
CVE-2024-37057
MLFlow unsafe deserialization
High
CVE-2024-37058
MLFlow unsafe deserialization
High
CVE-2024-37060
MLFlow unsafe deserialization
High
CVE-2024-37054
MLFlow unsafe deserialization
High
CVE-2024-37052
MLFlow unsafe deserialization
High
CVE-2024-37055
MLFlow unsafe deserialization
High
CVE-2024-37056
MLFlow unsafe deserialization
High
CVE-2024-37053
MLFlow unsafe deserialization
Critical
CVE-2024-4253
A command injection vulnerability exists in the gradio-app/gradio repository, specifically within the 'test-functional.yml' workflow. The vulnerability arises due to improper neutralization of special
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.