Critical
CVE-2024-36678
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 255
Reset filters
Critical
CVE-2024-36684
Improper neutralization of SQL parameter in Promokit.eu - Custom links module for PrestaShop
High
CVE-2024-36677
Exposure of Private Personal Information to an Unauthorized Actor in Weblir - Login as customer PRO module for PrestaShop
Critical
CVE-2024-36679
Improper Control of Generation of Code in Module Live Chat Pro (All in One Messaging) module for PrestaShop
Critical
CVE-2024-33836
Unrestricted Upload of File with Dangerous Type in JA Marketplace module for PrestaShop
Critical
CVE-2024-34990
Unrestricted Upload of File with Dangerous Type in FME Modules - Help Desk - Customer Support Management System module for PrestaShop
Critical
CVE-2024-34994
Improper neutralization of SQL parameter in Channable module for PrestaShop
Critical
CVE-2024-34993
Improper neutralization of SQL parameter in Buy Addons - Bulk Export products to Google Merchant-Google Shopping module for PrestaShop
Medium
CVE-2024-34717
Anonymous PrestaShop customer can download other customers' invoices
Critical
CVE-2024-34716
PrestaShop cross-site scripting via customer contact form in FO, through file upload
Critical
CVE-2024-33275
Improper neutralization of SQL parameter in Webbax - Super Newsletter module for PrestaShop
Critical
CVE-2024-33273
Improper neutralization of SQL parameter in ShipUp module for PrestaShop
High
CVE-2023-45385
Improper Limitation of a Pathname to a Restricted Directory in ProQuality - Print Shipping Labels Pro module for PrestaShop
Critical
CVE-2024-33267
Improper neutralization of SQL parameter in Hero - Payment module for PrestaShop
High
CVE-2024-33270
Exposure of Private Personal Information to an Unauthorized Actor in FME Modules - Customer File Upload-Attach File on Product,Cart pages module for PrestaShop
High
CVE-2024-33274
Improper Limitation of a Pathname to a Restricted Directory in FME Modules - Custom Checkout Fields, Add Custom Fields to Checkout module for PrestaShop
Critical
CVE-2024-33276
Improper neutralization of SQL parameter in FME Modules - Pre-Order module for PrestaShop
Critical
CVE-2024-33268
Improper neutralization of SQL parameter in Digincube - Free Gifts Products module for PrestaShop
Critical
CVE-2024-33269
Improper neutralization of SQL parameter in Prestaddons - Flash Sales module for PrestaShop
High
CVE-2024-33271
Exposure of Private Personal Information to an Unauthorized Actor in FME Modules - Events Manager, Create events & Sell tickets Online module for PrestaShop
Critical
CVE-2024-33266
Improper neutralization of SQL parameter in Helloshop - Tracking Center - Parcel tracking 80 carriers module for PrestaShop
Critical
CVE-2024-33272
Improper neutralization of SQL parameters in Knowband - Search Auto Suggest module for PrestaShop
Critical
CVE-2024-28393
Improper neutralization of SQL parameter in Scalapay module for PrestaShop
Critical
CVE-2024-28386
Improper Neutralization of Special Elements used in an OS Command in the Home-Made.io - FastMag Sync module for PrestaShop
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.