Medium
CVE-2024-13470
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Medium
CVE-2025-24791
snowflake-sdk may incorrectly validate temporary credential cache file permissions
Medium
CVE-2025-24790
Snowflake JDBC uses insecure temporary credential cache file permissions
High
CVE-2025-24789
Snowflake JDBC allows an untrusted search path on Windows
Medium
CVE-2025-24374
Twig security issue where escaping was missing when using null coalesce operator
Medium
CVE-2024-13457
Event Tickets <= 5.18.1 - Insecure Direct Object Reference to Sensitive Information Exposure
Unrated
CVE-2025-3062
drupal/druadmin_lte_theme - SA-CONTRIB-2025-010
Medium
CVE-2024-57438
RuoYi has insecure permissions
Medium
CVE-2024-57439
RuoYi vulnerable to Denial of Service by attackers with admin privileges
High
CVE-2024-57436
RuoYi allowed unauthorized attackers to view the session ID of the admin in the system monitoring
Medium
CVE-2024-29869
Apache Hive Incorrectly Assigns Permissions for a Critical Resource
Medium
CVE-2024-12921
EthereumICO <= 2.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via ethereum-ico Shortcode
Medium
CVE-2024-52500
Monetag Official Plugin <= 1.1.3 - Missing Authorization
Medium
CVE-2024-12409
Simple:Press Forum <= 6.10.11 - Reflected Cross-Site Scripting
Medium
CVE-2024-13664
WP Post List Table <= 1.0.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-8494
Elementor Website Builder Pro – More than Just a Page Builder <= 3.25.10 - Authenticated (Contributor+) Sensitive Information Exposure via Shortcode
Medium
CVE-2024-12861
W2S – Migrate WooCommerce to Shopify <= 1.2.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read
Medium
CVE-2024-13380
Alex Reservations: Smart Restaurant Booking <= 2.0.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-13642
Stratum – Elementor Widgets <= 1.4.7 - Authenticated (Contributor+) Stored Cross-Site Scripting Vulnerability via Image Hotspot Widget
Medium
CVE-2024-13549
All Bootstrap Blocks <= 1.3.26 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-13128
LearnPress – WordPress LMS Plugin <= 4.2.7.5 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2024-13707
WP Image Uploader <= 1.0.1 - Cross-Site Request Forgery to Arbitrary File Deletion
High
CVE-2024-13720
WP Image Uploader <= 1.0.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion
Medium
CVE-2025-24692
Bulk Menu Edit <= 1.3.0 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.