High
CVE-2024-6750
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
High
CVE-2024-6756
Social Auto Poster <= 5.3.14 - Authenticated (Contributor+) Arbitrary File Upload
Medium
CVE-2024-5744
WP eMember <= 10.6.6 - Reflected Cross-Site Scripting via $_SERVER['REQUEST_URI']
Critical
CVE-2024-28698
CLSA Directory Traversal vulnerability
Medium
CVE-2024-41132
SixLabors ImageSharp has Excessive Memory Allocation in Gif Decoder
High
CVE-2024-41131
SixLabors ImageSharp Out-of-bounds Write
High
ghsa-crjg-w57m-rqqf
DNSJava vulnerable to KeyTrap - Denial-of-Service Algorithmic Complexity Attacks
High
ghsa-mmwx-rj87-vfgr
DNSJava affected by KeyTrap - NSEC3 closest encloser proof can exhaust CPU resources
High
CVE-2024-25638
DNSJava DNSSEC Bypass
High
CVE-2024-6885
MaxiBlocks: 2200+ Patterns, 190 Pages, 14.2K Icons & 100 Styles <= 1.9.2 - Authenticated (Subscriber+) Arbitrary File Deletion
High
CVE-2024-38503
Apache Syncope Improper Input Validation vulnerability
Medium
CVE-2024-23321
Apache RocketMQ Vulnerable to Unauthorized Exposure of Sensitive Data
High
CVE-2024-6828
Redux Framework 4.4.12 - 4.4.17 - Unauthenticated JSON File Upload to Stored Cross-Site Scripting
Medium
CVE-2024-41709
Backdrop CMS does not sufficiently sanitize field labels before they are displayed in certain places
Medium
CVE-2024-5028
CM WordPress Search And Replace Plugin <= 1.3.8 - Cross-Site Request Forgery to Plugin Setting Reset
Medium
CVE-2024-38791
AI Engine <= 2.4.7 - Authenticated (Subscriber+) Server-Side Request Forgery
Medium
CVE-2024-39625
Icegram <= 3.1.24 - Missing Authorization to Unauthenticated Message Duplication
High
CVE-2024-38793
Best Restaurant Menu by PriceListo <= 1.4.1 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-39626
Pretty Simple Popup Builder <= 1.0.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2024-39621
ListingPro Plugin <= 2.9.4 - Authenticated (Author+) Local File Inclusion
Critical
CVE-2024-39620
ListingPro Plugin <= 2.9.4 - Authenticated (Subscriber+) SQL Injection
The ListingPro plugin for WordPress is vulnerable to SQL injection, allowing authenticated users with subscriber-level access or higher to extract sensitive database information.
Critical
CVE-2024-39622
ListingPro <= 2.9.4 - Unauthenticated SQL Injection
Medium
CVE-2024-39630
Timetable and Event Schedule <= 2.4.13 - Authenticated (Admin+) PHP Object Injection
High
CVE-2024-39623
ListingPro <= 2.9.4 - Cross-Site Request Forgery to Account Takeover
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.