High
CVE-2025-24556
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2024-11183
Simple Side Tab <= 2.1.14 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2025-24550
Job Manager by JobScore <= 2.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting
Medium
CVE-2024-10592
Mapster WP Maps <= 1.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-11094
404 Solution <= 2.35.17 - Missing Authentication to Sensitive Information Exposure
High
CVE-2024-52526
LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device/services.inc.php
Low
CVE-2024-21539
Regular Expression Denial of Service (ReDoS) in @eslint/plugin-kit
High
CVE-2024-9887
Login using WordPress Users ( WP as SAML IDP ) <= 1.15.6 - Authenticated (Administrator+) SQL Injection
High
CVE-2024-10645
Blogger 301 Redirect <= 2.5.3 - Unauthenticated SQL Injection via br
Critical
CVE-2024-51092
LibreNMS has an Authenticated OS Command Injection
High
CVE-2024-51497
LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/print-customoid.php
High
CVE-2024-51496
LibreNMS has a Reflected XSS ('Cross-site Scripting') in librenms/includes/html/pages/wireless.inc.php
High
CVE-2024-51495
LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/dev-overview-data.inc.php
High
CVE-2024-51494
LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/app/Http/Controllers/Table/EditPortsController.php
High
CVE-2024-50355
LibreNMS has a Persistent XSS from Insecure Input Sanitization Affects Multiple Endpoints
High
CVE-2024-50352
LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device/overview/services.inc.php
High
CVE-2024-50351
LibreNMS has a Reflected XSS ('Cross-site Scripting') in librenms/includes/functions.php
High
CVE-2024-50350
LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/app/Http/Controllers/Table/EditPortsController.php
High
CVE-2024-49764
LibreNMS has a Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/device/capture.inc.php
High
CVE-2024-49759
Stored XSS ('Cross-site Scripting') in librenms/includes/html/pages/edituser.inc.php
Medium
CVE-2024-10533
WP Chat App <= 3.6.8 - Missing Authorization to Authenticated (Subscriber+) Filebird Plugin Installation
Medium
CVE-2024-49758
LibreNMS has a stored XSS in ExamplePlugin with Device's Notes
Medium
CVE-2024-9386
Exclusive Divi – Divi Preloader, Modules for Divi & Extra Theme <= 1.4 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-8873
PeproDev WooCommerce Receipt Uploader <= 2.6.9 - Reflected Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.