High
CVE-2024-39399
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
CVE-2024-39398
Magento does not properly restrict excessive authentication attempts
High
CVE-2024-39402
Magento OS Command ('OS Command Injection') vulnerability
High
CVE-2024-39401
Magento OS Command ('OS Command Injection') vulnerability
Medium
CVE-2024-39404
Magento Improper Authorization vulnerability
Medium
CVE-2024-7063
ElementsKit Pro <= 3.6.6 - Authenticated (Contributor+) Sensitive Information Exposure
High
CVE-2024-7624
Zephyr Project Manager <= 3.3.101 - Authenticated (Subscriber+) Limited Privilege Escalation
Medium
CVE-2024-7786
Sensei LMS – Online Courses, Quizzes, & Learning <= 4.24.1 - Unauthenticated Email Template Disclosure
Medium
CVE-2024-7064
ElementsKit Pro <= 3.6.5 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-6846
Chatbot with ChatGPT <= 2.4.4 - Missing Authorization
Medium
CVE-2024-6532
Sheet to Table Live Sync for Google Sheet <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via STWT_Sheet_Table Shortcode
High
CVE-2024-4389
Slider & Popup Builder by Depicter – Add Image Slider, Carousel Slider, Exit Intent Popup, Popup Modal, Coupon Popup, Post Slider Carousel <= 3.1.1 - Authenticated (Contributor+) Arbitrary File Upload
High
CVE-2024-38168
Microsoft Security Advisory CVE-2024-38168 | .NET Denial of Service Vulnerability
Medium
CVE-2024-38167
Microsoft Security Advisory CVE-2024-38167 | .NET Information Disclosure Vulnerability
Medium
CVE-2024-6711
Event Tickets with Ticket Scanner <= 2.3.7 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-6020
Sign-up Sheets <= 2.2.12 - Reflected Cross-Site Scripting
Medium
CVE-2024-6888
Secure Copy Content Protection and Content Locking <= 4.1.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-6708
User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor <= 3.12.1 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-6889
Secure Copy Content Protection and Content Locking <= 4.1.6 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-7588
Gutenberg Blocks, Page Builder – ComboBlocks <= 2.2.87 - Authenticated (Contributor+) Stored Cross-Site Scripting via Accordion Block
High
CVE-2024-42485
Filament Excel Vulnerable to Path Traversal Attack on Export Download Endpoint
High
CVE-2024-41909
Apache MINA SSHD: integrity check bypass
Medium
CVE-2024-42474
Path traveral in Streamlit on windows
High
CVE-2024-6823
Media Library Assistant <= 3.18 - Authenticated (Author+) Arbitrary File Upload via mla-inline-edit-upload-scripts AJAX Action
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.