Medium
CVE-2024-47605
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Low
ghsa-m9c9-mc2h-9wjw
Lodestar snappy checksum issue
Low
ghsa-53rv-hcvm-rpp9
Lodestar snappy decompression issue
Medium
CVE-2024-12593
PDF for WPForms + Drag and Drop Template Builder <= 4.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via yeepdf_dotab Shortcode
Critical
CVE-2024-9636
Post Grid and Gutenberg Blocks 2.2.85 - 2.3.3 - Unauthenticated Privilege Escalation
High
CVE-2024-13351
Social proof testimonials and reviews by Repuso <= 5.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10775
Piotnet Addons For Elementor <= 2.4.32 - Authenticated (Contributor+) Post Disclosure
High
CVE-2025-21176
Microsoft Security Advisory CVE-2025-21176 | .NET and Visual Studio Remote Code Execution Vulnerability
High
CVE-2025-21172
Microsoft Security Advisory CVE-2025-21172 | .NET and Visual Studio Remote Code Execution Vulnerability
High
CVE-2025-21171
Microsoft Security Advisory CVE-2025-21171 | .NET Remote Code Execution Vulnerability
Medium
CVE-2025-23041
Umbraco Forms's Short and Long Answer Fields Are Not Validated Server-Side For Maximum Length
High
CVE-2024-50338
Git Credential Manager carriage-return character in remote URL allows malicious repository to leak credentials
Critical
CVE-2025-23042
Gradio Blocked Path ACL Bypass Vulnerability
Medium
CVE-2024-56374
Django has a potential denial-of-service vulnerability in IPv6 validation
Medium
CVE-2024-11870
Event Registration Calendar By vcita <= 1.4.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2025-23081
Mediawiki - DataTransfer Extension Cross-Site Request Forgery (CSRF) and Cross-site Scripting (XSS)
Medium
CVE-2024-45627
Apache Linkis Metadata Query Service JDBC: JDBC Datasource Module with Mysql has file read vulnerability
Low
CVE-2025-21607
Vyper Does Not Check the Success of Certain Precompile Calls
Medium
CVE-2024-13394
ViewMedica 9 <= 1.4.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2025-23025
XWiki Realtime WYSIWYG Editor extension allows privilege escalation (PR) through realtime WYSIWYG editing
Critical
CVE-2024-49375
Rasa Allows Remote Code Execution via Remote Model Loading
Medium
CVE-2024-55945
TYPO3 DB Check Module vulnerable to Cross-Site Request Forgery
High
CVE-2024-55924
TYPO3 Scheduler Module vulnerable to Cross-Site Request Forgery
Medium
CVE-2024-55923
TYPO3 Indexed Search Module vulnerable to Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.