Medium
CVE-2024-1409
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,426
Medium
CVE-2024-1779
Admin side data storage for Contact Form 7 plugin <= 1.1.1 - Missing Authorization to Unauthenticated Read Status Update
Medium
CVE-2024-1361
Colibri Page Builder <= 1.0.253 - Cross-Site Request Fogery via extend_builder
Critical
CVE-2024-1597
org.postgresql:postgresql vulnerable to SQL Injection via line comment generation
Medium
CVE-2024-26138
XWiki extension license information is public, exposing instance id and license holder details
Medium
CVE-2024-25117
php-svg-lib lacks path validation on font through SVG inline styles
High
CVE-2024-26130
cryptography NULL pointer dereference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override
Critical
CVE-2024-23346
pymatgen vulnerable to arbitrary code execution when parsing a maliciously crafted JonesFaithfulTransformation transformation_string
Unrated
CVE-2024-13246
drupal/node_access_rebuild_progressive - SA-CONTRIB-2024-010
Critical
CVE-2023-47795
Liferay Portal Document and Media widget and Liferay DXP vulnerable to stored Cross-site Scripting
Medium
CVE-2024-25151
Liferay Portal Calendar module and Liferay DXP vulnerable to Cross-site Scripting, content spoofing
Critical
CVE-2024-25603
Liferay Portal's Dynamic Data Mapping module's DDMForm and Liferay DXP vulnerable to stored Cross-site Scripting
Critical
CVE-2024-26269
Liferay Portal Frontend JS module's portlet.js and Liferay DXP vulnerable to Cross-site Scripting
Critical
CVE-2024-26266
Liferay Portal and Liferay DXP vulnerable to stored Cross-site Scripting
Critical
CVE-2023-40191
Liferay Portal and Liferay DXP vulnerable to reflected Cross-site Scripting
Critical
CVE-2023-42498
Liferay Portal Language Override edit screen and Liferay DXP vulnerable to reflected Cross-site Scripting
Critical
CVE-2023-42496
Liferay Portal and Liferay DXP vulnerable to reflected Cross-site Scripting
Critical
CVE-2024-25601
Liferay Portal Expando module and Liferay DXP vulnerable to stored Cross-site Scripting
Critical
CVE-2024-25602
Liferay Portal and Liferay DXP's Users Admin module vulnerable to stored Cross-site Scripting
Critical
CVE-2024-25152
Liferay Portal Message Board widget and Liferay DXP vulnerable to stored Cross-site Scripting
Critical
CVE-2024-25147
Liferay Portal and Liferay DXP vulnerable to Cross-site Scripting
Critical
CVE-2024-1631
agent-js: Insecure Key Generation in `Ed25519KeyIdentity.generate`
High
CVE-2021-29050
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery in Terms of Use Page
Medium
CVE-2021-29038
Liferay Portal and Liferay DXP Does Not Obfuscate Password Reminder Answers
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.