Critical
CVE-2024-9933
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Critical
CVE-2024-50473
Ajar in5 Embed <= 3.1.3 - Unauthenticated Arbitrary File Upload
Critical
CVE-2024-9931
Wux Blog Editor <= 3.0.0 - Authentication Bypass to Administrator
Critical
CVE-2024-50482
Woocommerce Product Design <= 1.0.0 - Unauthenticated Arbitrary File Upload
High
CVE-2024-50479
Woocommerce Quote Calculator <= 1.1 - Unauthenticated SQL Injection
Critical
CVE-2024-50475
Signup Page <= 1.0 - Unauthenticated Arbitrary Options Update
High
CVE-2024-50481
Bstone Demo Importer <= 1.0.1 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2024-50502
Cozy Blocks <= 2.0.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-50478
1-Click Login: Passwordless Authentication 1.4.5 - Authentication Bypass via Account Takeover
High
CVE-2024-50491
RSVP ME <= 1.9.9 - Unauthenticated SQL Injection
Medium
CVE-2024-50501
Kata Plus <= 1.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-50492
ScottCart <= 1.1 - Unauthenticated Remote Code Execution
High
CVE-2024-50488
Token Login <= 1.0.3 - Authenticated (Subscriber+) Privilege Escalation
Critical
CVE-2024-50484
Multi Purpose Mail Form <= 1.0.2 - Unauthenticated Arbitrary File Upload
Critical
CVE-2024-50496
AR For WordPress <= 6.6 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-10374
WP-Members <= 3.4.9.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpmem_loginout Shortcode
Medium
CVE-2024-49750
The Snowflake Connector for Python stores sensitive data in logs
Medium
CVE-2024-48425
A segmentation fault (SEGV) was detected in the Assimp::SplitLargeMeshesProcess_Triangle::UpdateNode function within the Assimp library during fuzz testing using AddressSanitizer. The crash occurs due
Medium
CVE-2024-48424
A heap-buffer-overflow vulnerability has been identified in the OpenDDLParser::parseStructure function within the Assimp library, specifically during the processing of OpenGEX files.
Medium
CVE-2024-48426
A segmentation fault (SEGV) was detected in the SortByPTypeProcess::Execute function in the Assimp library during fuzz testing with AddressSanitizer. The crash occurred due to a read access to an inva
High
CVE-2024-48423
An issue in assimp v.5.4.3 allows a local attacker to execute arbitrary code via the CallbackToLogRedirector function within the Assimp library.
Medium
CVE-2024-8666
Shoutcast Icecast HTML5 Radio Player <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10016
File Upload Types by WPForms <= 1.4.0 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-10112
Simple News <= 2.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via news Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.