Medium
CVE-2024-1585
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2024-2239
Premium Addons PRO <= 2.9.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Premium Magic Scroll Module
Medium
CVE-2024-1690
TeraWallet – Best WooCommerce Wallet System With Cashback Rewards, Partial Payment, Wallet Refunds <= 1.4.10 - Missing Authorization to Authenticated (Subscriber+) User Email Export
Medium
CVE-2024-0677
Pz-LinkCard <= 2.5.2 - Sever-Side Request Forgery
Medium
CVE-2024-2126
Orbit Fox by ThemeIsle <= 2.10.32 - Authenticated (Contributor+) Stored Cross-Site Scripiting via Registration Form Widget
Medium
CVE-2024-28161
Jenkins Delphix Plugin has SSL/TLS certificate validation disabled by default
Medium
CVE-2024-28162
Jenkins Delphix Plugin has improper SSL/TLS certificate validation
Medium
CVE-2024-28160
Jenkins iceScrum Plugin vulnerable to stored Cross-site Scripting
Medium
CVE-2024-2215
Jenkins docker-build-step Plugin Cross-Site Request Forgery vulnerability
Medium
CVE-2024-28159
Jenkins Subversion Partial Release Manager Plugin missing permission check
Medium
CVE-2024-2216
Jenkins docker-build-step Plugin missing permission check
Medium
CVE-2024-28154
Jenkins MQ Notifier Plugin exposes sensitive information in build logs
Medium
CVE-2024-28156
Jenkins Build Monitor View Plugin vulnerable to stored Cross-site Scripting
Medium
CVE-2024-28155
Jenkins AppSpider Plugin missing permission checks
Medium
CVE-2024-28153
Jenkins OWASP Dependency-Check Plugin has stored XSS vulnerability
High
CVE-2024-28149
Jenkins HTML Publisher Plugin does not properly sanitize input
High
CVE-2024-28150
Jenkins HTML Publisher Plugin Stored XSS vulnerability
Medium
CVE-2024-28152
Jenkins Bitbucket Branch Source Plugin has incorrect trust policy behavior for pull requests
Medium
CVE-2024-28151
Jenkins HTML Publisher Plugin Path traversal vulnerability
Medium
CVE-2024-28158
Jenkins Subversion Partial Release Manager Plugin vulnerable to Cross-Site Request Forgery
High
CVE-2024-28157
Jenkins GitBucket Plugin vulnerable to stored Cross-site Scripting
Unrated
CVE-2024-13251
drupal/registration_role - SA-CONTRIB-2024-015
Medium
CVE-2024-27927
RSSHub vulnerable to Server-Side Request Forgery
Medium
CVE-2024-27926
RSSHub Cross-site Scripting vulnerability caused by internal media proxy
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.