Unrated
CVE-2024-13265
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
CVE-2024-7150
Slider by 10Web – Responsive Image Slider <= 1.2.57 - Authenticated (Contributor+) SQL Injection via id Parameter
Unrated
CVE-2024-13264
drupal/opigno_module - SA-CONTRIB-2024-028
Unrated
CVE-2024-13263
drupal/opigno_group_manager - SA-CONTRIB-2024-027
Medium
CVE-2024-5226
Fuse Social Floating Sidebar <= 5.4.10 - Authenticated (Author+) Stored Cross-Site Scripting via File Upload
High
CVE-2024-7548
LearnPress – WordPress LMS Plugin <= 4.2.6.9.3 - Authenticated (Contributor+) SQL Injection via order Parameter
Medium
CVE-2024-43045
Jenkins does not perform a permission check in an HTTP endpoint
High
CVE-2024-43044
Jenkins Remoting library arbitrary file read vulnerability
Medium
CVE-2024-41990
An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize() and urlizetrunc() template filters are subject to a potential denial-of-service attack via very large inputs with
Medium
CVE-2024-41989
An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The floatformat template filter is subject to significant memory consumption when given a string representation of a number in
Critical
CVE-2024-42005
An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. QuerySet.values() and values_list() methods on models with a JSONField are subject to SQL injection in column aliases via a cr
Medium
CVE-2024-41991
An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. The urlize and urlizetrunc template filters, and the AdminURLFieldWidget widget, are subject to a potential denial-of-service
Medium
CVE-2024-6254
Brizy – Page Builder <= 2.5.1 - Cross-Site Request Forgery
Medium
CVE-2024-6552
Booking for Appointments and Events Calendar – Amelia <= 1.2 - Unauthenticated Full Path Disclosure
High
CVE-2024-7486
MultiPurpose <= 1.2.0 - Authenticated (Contributor+) PHP Object Injection
High
CVE-2024-7560
News Flash <= 1.1.0 - Authenticated (Editor+) PHP Object Injection
Medium
CVE-2024-7355
Organization chart <= 1.5.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via title_input and node_description Parameters
Medium
CVE-2024-43156
Post Grid Master <= 3.4.10 - Reflected Cross-Site Scripting
Medium
CVE-2024-43162
Easy Digital Downloads <= 3.2.12 - Missing Authorization
Medium
CVE-2024-43130
Football Pool <= 2.11.10 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-43146
AMP for WP <= 1.0.96.1 - Missing Authorization
Medium
CVE-2024-43134
Waitlist Woocommerce ( Back in stock notifier ) <= 2.6 - Missing Authorization
Medium
CVE-2024-43159
Masteriyo - LMS <= 1.11.6 - Missing Authorization
Medium
CVE-2024-43120
TypeSquare Webfonts <= 2.0.7 - Missing Authorization via typesquare_admin_init()
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.