High
CVE-2024-47072
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2024-10187
myCred <= 2.7.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via mycred_link Shortcode
Medium
CVE-2024-10269
Easy SVG Support <= 3.7 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload
Medium
CVE-2024-10621
Simple Shortcode for Google Maps <= 1.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2015-3542
PHPExcel XXE Vulnerability
Low
CVE-2024-51758
Filament has exported files stored in default (`public`) filesystem if not reconfigured
Medium
CVE-2024-43436
Moodle vulnerable to site administration SQL injection via XMLDB editor
Medium
CVE-2024-43438
Moodle's IDOR in Feedback non-respondents report allows messaging arbitrary site users
Medium
CVE-2024-43426
Moodle has arbitrary file read risk through pdfTeX
Medium
CVE-2024-43440
Moodle LFI vulnerability when restoring malformed block backups
High
CVE-2024-43425
Moodle Remote Code Execution vulnerability
Medium
CVE-2024-43428
Moodle vulnerable to cache poisoning via injection into storage
Medium
CVE-2024-43431
Moodle's IDOR in badges allows deletion of arbitrary badges
High
CVE-2024-43434
Moodle has CSRF risk in Feedback non-respondents report
High
CVE-2024-51504
Apache ZooKeeper: Authentication bypass with IP-based authentication in Admin Server
Medium
CVE-2023-1932
hibernate-validator Cross-site Scripting vulnerability
Medium
CVE-2023-1973
Undertow Denial of Service vulnerability
High
CVE-2024-38286
Apache Tomcat Allocation of Resources Without Limits or Throttling vulnerability
Medium
CVE-2024-10473
Logo Slider <= 4.1.0 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2024-10896
Logo Slider <= 4.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10493
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid, Carousel and Remote Arrows) <= 5.10.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-10510
adBuddy+ (AdBlocker Detection) by NetfunkDesign <= 1.1.3 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-8442
Prime Slider - Addons For Elementor (Revolution of a slider, Hero Slider, Ecommerce Slider <= 3.15.18 - Authenticated (Contributor+) Stored Cross-Site Scripting via Blog Widget
Medium
CVE-2024-51751
Gradio vulnerable to arbitrary file read with File and UploadButton components
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.