Critical
CVE-2024-34394
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Critical
CVE-2024-34393
libxmljs2 type confusion vulnerability when parsing specially crafted XML
Critical
CVE-2024-34391
libxmljs vulnerable to type confusion when parsing specially crafted XML
Critical
CVE-2024-34392
libxmljs vulnerable to type confusion when parsing specially crafted XML
High
CVE-2024-34144
Jenkins Script Security Plugin has sandbox bypass vulnerability involving crafted constructor bodies
High
CVE-2024-34145
Jenkins Script Security Plugin sandbox bypass vulnerability
Medium
CVE-2024-4029
Wildfly vulnerable to denial of service
Medium
CVE-2024-34146
Jenkins Git server Plugin does not perform a permission check
Low
CVE-2024-34147
Jenkins Telegram Bot Plugin stores the Telegram Bot token in plaintext
Medium
CVE-2024-34148
Jenkins Subversion Partial Release Manager Plugin programmatically disables the fix for CVE-2016-3721
Low
CVE-2024-4128
Firebase vulnerable to CRSF attack
Critical
CVE-2024-3955
CraftBeerPi 4 allows arbitrary code execution
High
CVE-2024-32114
Apache ActiveMQ's default configuration doesn't secure the API web context
Medium
CVE-2024-3918
Pet Manager <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-3070
Last Viewed Posts by WPBeginner <= 1.0.0 - Unauthenticated PHP Object Injection
Medium
CVE-2024-3917
Pet Manager <= 1.4 - Reflected Cross-Site Scripting
Medium
CVE-2024-3991
ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.8.7 - Authenticated (contributor+) Stored Cross-Site Scripting via _id
Medium
CVE-2024-3920
Flattr <= 1.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-4433
Simple Image Popup <= 2.4.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-4107
Elementor Website Builder Pro <= 3.21.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Medium
CVE-2024-2220
Button contact VR <= 4.7 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2024-25355
s3-url-parser vulnerable to Denial of Service via regexes component
Critical
CVE-2024-32962
xml-crypto vulnerable to XML signature verification bypass due improper verification of signature/signature spoofing
Low
CVE-2024-31573
XMLUnit for Java has Insecure Defaults when Processing XSLT Stylesheets
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.