Medium
CVE-2023-50378
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2024-26280
Apache Airflow, versions before 2.8.2, has a vulnerability that allows authenticated Ops and Viewers users to view all information on audit logs, including dag names and usernames they were not permit
Critical
CVE-2024-2057
A vulnerability was found in LangChain langchain_community 0.0.26. It has been classified as critical. Affected is the function load_local in the library libs/community/langchain_community/retrievers/
Medium
CVE-2023-52555
mongo-express Cross-site Request Forgery vulnerability
Medium
CVE-2024-22891
Nteract Remote Code Execution vulnerability
Medium
CVE-2024-1398
Ultimate Bootstrap Elements for Elementor <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-27949
Image Optimizer, Resizer and CDN – Sirv <= 7.2.0 - Authenticated (Subscriber+) Server-Side Request Forgery
Medium
CVE-2024-1541
Gutenberg Blocks by Kadence Blocks – Page Builder Features <= 3.2.23 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1668
Avada <= 7.11.5 - Authenticated(Contributor+) Sensitive Information Exposure via Form Entries
Medium
CVE-2024-23501
Ebook Store <= 5.8001 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-1449
Master Slider – Responsive Touch Slider <= 3.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-0611
Master Slider – Responsive Touch Slider <= 3.9.9 - Authenticated(Editor+) Stored Cross-Site Scripting via slider callback
Medium
CVE-2024-1592
Complianz – GDPR/CCPA Cookie Consent <= 6.5.6 - Cross-Site Request Forgery to Data Request Deletion
Medium
CVE-2024-1479
WP Show Posts <= 1.1.4 - Information Exposure
Medium
CVE-2024-1452
GenerateBlocks <= 1.8.2 - Sensitive Information Exposure
Medium
CVE-2023-6326
Master Slider - Responsive Touch Slider <= 3.9.10 - Cross-Site Request Forgery via process_bulk_action
Medium
CVE-2024-0378
AI Engine <= 2.2.0 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-27950
Image Optimizer, Resizer and CDN – Sirv <= 7.2.0 - Missing Authorization
High
CVE-2024-2020
Calculated Fields Form Professional <= 5.1.56 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-1775
Nextend Social Login and Register <= 3.1.12 - Reflected Self-Based Cross-Site Scripting via error_description
Medium
CVE-2024-27094
OpenZeppelin Contracts base64 encoding may read from potentially dirty memory
Medium
CVE-2024-2001
Cockpit CMS Cross-Site Scripting vulnerability
Medium
CVE-2024-27906
Apache Airflow, versions before 2.8.2, has a vulnerability that allows authenticated users to view DAG code and import errors of DAGs they do not have permission to view through the API and the UI.
High
CVE-2024-22871
Reading specially crafted serializable objects from an untrusted source may cause an infinite loop and denial of service
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.