High
CVE-2024-9519
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
CVE-2024-48035
ACF Images Search And Insert <= 1.1.4 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-48031
Featured Posts with Multiple Custom Groups (FPMCG) <= 4.0 - Cross-Site Request Forgery
Medium
CVE-2024-48025
Simple Baseball Scoreboard <= 1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-47823
Livewire Remote Code Execution on File Uploads
Low
CVE-2024-34537
Denial of Service in TYPO3 Bookmark Toolbar
High
CVE-2024-43485
Microsoft Security Advisory CVE-2024-43485 | .NET Denial of Service Vulnerability
High
CVE-2024-43484
Microsoft Security Advisory CVE-2024-43484 | .NET Denial of Service Vulnerability
High
CVE-2024-43483
Microsoft Security Advisory CVE-2024-43483 | .NET Denial of Service Vulnerability
Medium
CVE-2024-9451
Embed PDF Viewer <= 2.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via height and width Parameters
High
CVE-2024-43497
DeepSpeed Remote Code Execution Vulnerability
Medium
CVE-2024-9622
HTTP Request Smuggling Leading to Client Timeouts in resteasy-netty4
Medium
CVE-2024-9621
Quarkus CXF logs passwords and other secrets
Low
CVE-2024-45231
Django allows enumeration of user e-mail addresses
Medium
CVE-2024-45230
An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16. The urlize() and urlizetrunc() template filters are subject to a potential denial-of-service attack via ver
High
CVE-2024-38229
Microsoft Security Advisory CVE-2024-38229 | .NET Remote Code Execution Vulnerability
Medium
CVE-2024-9449
Auto iFrame <= 1.7 - Authenticated (Author+) Stored Cross-Site Scripting via tag Parameter
Low
CVE-2024-47780
Information Disclosure in TYPO3 Page Tree
Medium
CVE-2024-21533
ggit is vulnerable to Arbitrary Argument Injection via the clone() API
Medium
CVE-2024-45277
SAP HANA Node.js client package vulnerable to Prototype Pollution
Medium
CVE-2024-21532
ggit is vulnerable to Command Injection via the fetchTags(branch) API
Medium
CVE-2024-48022
Shortcode For Elementor Templates <= 1.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-48020
Backup and Staging by WP Time Capsule <= 1.22.21 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-7963
CMSMasters Content Composer <= 1.8.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.