Medium
CVE-2024-12607
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,638
Medium
CVE-2024-13805
Advanced File Manager <= 5.2.14 - Authenticated (Subscriber+) Stored Cross-Site Scripting via SVG File Upload
High
CVE-2025-0749
Homey <= 2.4.3 - Limited Authentication Bypass due to Missing Empty Value Check
Critical
CVE-2025-1475
WPCOM Member <= 1.7.5 - Authentication Bypass via 'user_phone'
High
CVE-2025-27508
Emissary May Use a Broken or Risky Cryptographic Algorithm
Medium
CVE-2025-1383
Podlove Podcast Publisher <= 4.2.2 - Cross-Site Request Forgery via ajax_transcript_delete Function
Medium
CVE-2025-1672
Notibar <= 2.1.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-13897
Moving Media Library <= 1.22 - Authenticated (Administrator+) Directory Traversal to Arbitrary File Deletion
High
ghsa-3x5x-fw77-g54c
dmlc/dgl Vulnerable to Remote Code Execution by Pickle Deserialization via rpc.recv_request()
Critical
CVE-2025-27517
Volt Allows RCE Via User-Crafted Requests
Medium
CVE-2025-27515
Laravel has a File Validation Bypass
Medium
CVE-2025-27412
REDAXO allows Authenticated Reflected Cross Site Scripting - packages installation
High
CVE-2025-27497
OpenDJ Denial of Service (DoS) using alias loop
Medium
CVE-2025-27411
REDAXO allows Arbitrary File Upload in the mediapool page
Critical
CVE-2023-38693
Lucee RCE/XXE Vulnerability
Medium
CVE-2025-27513
OpenTelemetry .NET has Denial of Service (DoS) Vulnerability in API Package
High
CVE-2025-26319
FlowiseAI Flowise arbitrary file upload vulnerability
Medium
CVE-2025-1666
Cookie banner plugin for WordPress – Cookiebot CMP by Usercentrics <= 4.4.1 - Missing Authorization to Authenticated (Subscriber+) Survey Submission
Medium
CVE-2025-22623
Ad Inserter - Ad Manager and AdSense Ads <= 2.8.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-13146
Booknetic 4.0 - 4.1.4 - Cross-Site Request Forgery
High
33f17152-f273-46d0-ad37-55953adee919
Greek Multi Tool <= 2.3.1 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-11847
WP SVG Upload <= 1.0.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG
Medium
CVE-2025-1463
Spreadsheet Integration <= 3.8.2 - Cross-Site Request Forgery to Arbitrary Post Publish
High
CVE-2025-1702
Ultimate Member <= 2.10.0 - Unauthenticated SQL Injection via search Parameter
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.