High
CVE-2024-57082
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
High
CVE-2024-57080
vxe-table prototype pollution
High
CVE-2024-57068
@tanstack/form-core prototype pollution
High
CVE-2024-57072
module-from-string prototype pollution
High
CVE-2024-57066
@ndhoule/defaults prototype pollution
Critical
CVE-2025-1061
Nextend Social Login Pro <= 3.1.16 - Authentication Bypass via Apple OAuth provider
Medium
CVE-2025-71404
Better Auth URL parameter HTML Injection (Reflected Cross-Site scripting)
Medium
CVE-2024-10973
Keycloak on Quarkus CLI option for encrypted JGroups ignored
Medium
CVE-2025-0859
Post and Page Builder by BoldGrid <= 1.27.6 - Path Traversal to Authenticated (Contributor+) Arbitrary File Read via template_via_url Function
High
CVE-2024-13487
CURCY – Multi Currency for WooCommerce <= 2.2.5 - Unauthenticated Arbitrary Shortcode Execution via get_products_price Function
Critical
CVE-2024-36404
GeoTools Remote Code Execution (RCE) vulnerability in evaluating XPath expressions
Medium
CVE-2025-1026
Browsershot Local File Inclusion
High
CVE-2025-1025
Cockpit Arbitrary File Upload
High
CVE-2025-1022
Browsershot Path Traversal
Medium
CVE-2024-10563
WooCommerce Cart Count Shortcode <= 1.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-12737
WP BASE Booking of Appointments, Services and Events <= 4.9.2 - Reflected Cross-Site Scripting
Critical
CVE-2025-24964
Vitest allows Remote Code Execution when accessing a malicious website while Vitest API server is listening
Medium
CVE-2025-24963
Vitest browser mode serves arbitrary files
Medium
CVE-2024-13829
WordPress form builder plugin for contact forms, surveys and quizzes – Tripetto <= 8.0.8 - Unauthenticated Sensitive Information Exposure
Medium
CVE-2024-27137
Apache Cassandra: unrestricted deserialization of JMX authentication credentials
Medium
CVE-2025-24860
Apache Cassandra: CassandraNetworkAuthorizer and CassandraCIDRAuthorizer can be bypassed allowing access to different network regions
High
CVE-2025-23015
Apache Cassandra: User with MODIFY permission on ALL KEYSPACES can escalate privileges to superuser via unsafe actions
Low
CVE-2025-0148
Jenkins Zoom Plugin is Missing Password Field Masking
Medium
CVE-2025-0688
Spiritual Gifts Survey <= 0.9.10 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.