Medium
CVE-2024-56210
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Medium
CVE-2024-56256
Embed PDF Viewer <= 2.3.1 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-56217
Download Manager <= 3.3.03 - Missing Authorization
Medium
CVE-2024-56224
Ledenbeheer <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-56209
Kleo < 5.4.4 - Reflected Cross-Site Scripting
High
CVE-2024-56233
Kintpv Wooconnect <= 8.129 - Unauthenticated Stored Cross-Site Scripting
Critical
Exploited in attacks
CVE-2024-56145
Craft CMS has potential RCE when PHP `register_argc_argv` config setting is enabled
High
ghsa-hvm9-wc8j-mgrc
TShock Security Escalation Exploit
Medium
CVE-2024-11768
Download manager <= 3.3.03 - Improper Authorization to Unauthenticated Download of Password-Protected Files
High
CVE-2024-11740
Download Manager <= 3.3.03 - Unauthenticated Arbitrary Shortcode Execution
Low
ghsa-m56h-5xx3-2jc2
Prototype pollution in jsii.configureCategories
Low
CVE-2024-56128
Apache Kafka's SCRAM implementation Incorrectly Implements Authentication Algorithm
Medium
CVE-2024-56140
Atro CSRF Middleware Bypass (security.checkOrigin)
High
CVE-2024-21546
UniSharp Laravel Filemanager Code Injection vulnerability
High
CVE-2024-21547
Spatie Browsershot Directory Traversal vulnerability
Medium
CVE-2024-21548
Bun has an Application-level Prototype Pollution vulnerability in the runtime native API for Glo
Medium
CVE-2023-37940
Liferay Portal and Liferay DXP have Cross-site Scripting vulnerability in edit Service Access Policy page
Medium
CVE-2024-10151
Auto iFrame <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12121
Broken Link Checker | Finder <= 2.5.0 - Authenticated (Author+) Blind Server-Side Request Forgery
Medium
CVE-2024-56060
HTML Forms <= 1.4.1 - Reflected Cross-Site Scripting
High
CVE-2024-56067
WP SuperBackup <= 2.3.3 - Missing Authorization to Unauthenticated Back-Up File Download
Critical
CVE-2024-56071
Simple Dashboard <= 2.0 - Unauthenticated Privilege Escalation
Critical
CVE-2024-12626
AutomatorWP <= 5.0.9 - Reflected Cross-Site Scripting via a-0-o-search_field_value
Medium
CVE-2024-56207
EditionGuard for WooCommerce – eBook Sales with DRM <= 3.4.2 - Cross-Site Request Forgery to Privilege Escalation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.