High
CVE-2024-45626
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,616
High
CVE-2024-57699
Netplex Json-smart Uncontrolled Recursion vulnerability
Critical
CVE-2024-57077
utils-extend Prototype Pollution
High
CVE-2024-57085
@stryker-mutator/util vulnerable to Prototype Pollution
High
CVE-2024-57086
node-opcua-alarm-condition prototype pollution vulnerability
High
CVE-2024-57075
eazy-logger prototype pollution
High
CVE-2024-57079
@zag-js/core prototype pollution
High
CVE-2024-57082
@rpldy/uploader prototype pollution
High
CVE-2024-57080
vxe-table prototype pollution
High
CVE-2024-57068
@tanstack/form-core prototype pollution
High
CVE-2024-57072
module-from-string prototype pollution
High
CVE-2024-57066
@ndhoule/defaults prototype pollution
Critical
CVE-2025-1061
Nextend Social Login Pro <= 3.1.16 - Authentication Bypass via Apple OAuth provider
Medium
CVE-2025-71404
Better Auth URL parameter HTML Injection (Reflected Cross-Site scripting)
Medium
CVE-2024-10973
Keycloak on Quarkus CLI option for encrypted JGroups ignored
Medium
CVE-2025-0859
Post and Page Builder by BoldGrid <= 1.27.6 - Path Traversal to Authenticated (Contributor+) Arbitrary File Read via template_via_url Function
High
CVE-2024-13487
CURCY – Multi Currency for WooCommerce <= 2.2.5 - Unauthenticated Arbitrary Shortcode Execution via get_products_price Function
Critical
CVE-2024-36404
GeoTools Remote Code Execution (RCE) vulnerability in evaluating XPath expressions
Medium
CVE-2025-1026
Browsershot Local File Inclusion
High
CVE-2025-1025
Cockpit Arbitrary File Upload
High
CVE-2025-1022
Browsershot Path Traversal
Medium
CVE-2024-10563
WooCommerce Cart Count Shortcode <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12737
WP BASE Booking of Appointments, Services and Events <= 4.9.2 - Reflected Cross-Site Scripting
Critical
CVE-2025-24964
Vitest allows Remote Code Execution when accessing a malicious website while Vitest API server is listening
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.