High
CVE-2024-24293
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,538
High
CVE-2024-29651
json-schema-ref-parser Prototype Pollution issue
Critical
CVE-2024-24294
Blackprint @blackprint/engine Prototype Pollution issue
High
ghsa-2g98-f9jv-w8c5
robrichards/xmlseclibs XPath injection
Medium
CVE-2024-4470
Master Slider – Responsive Touch Slider <= 3.9.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
ghsa-7v7m-pcw5-h3cg
Pusher Service Channel Authentication Bypass
Critical
ghsa-7g7c-qhf3-x59p
propel/propel1 SQL injection possible with limit() on MySQL
Critical
ghsa-7vw7-qx38-37vr
Propel2 SQL injection possible with limit() on MySQL
Medium
ghsa-ww6p-q26w-fr6m
phpxmlrpc/extra XSS in class documenting_xmlrpc_server
Medium
ghsa-qm5v-pj64-852j
Passbolt Api Tabnabbing when opening URI with menu "Open URI in a new tab"
High
ghsa-2f46-4xjm-73x5
Passbolt API Stored XSS on first/last name during setup
High
ghsa-cv5c-2qv5-w2m2
Passbolt Api Remote code execution
Low
ghsa-f5pp-pmq8-gp46
Passbolt Api Retrieval of HTTP-only cookies
Medium
ghsa-v86m-j5f7-ccwh
Passbolt Api E-mail HTML injection
High
CVE-2024-28109
veraPDF has potential XSLT injection vulnerability when using policy files
Medium
ghsa-3vhm-q4w3-rw8q
OroPlatform Forced Redirect to External Website
Medium
ghsa-v8hp-239v-9367
OroCRM Forced Redirect to External Website
Medium
CVE-2024-4943
Blocksy <= 2.0.46 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-3155
Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks <= 2.2.80 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-34795
Tainacan <= 0.21.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-34792
Dextaz Ping <= 0.65 - Authenticated (Admin+) Remote Code Execution
Medium
CVE-2024-34797
Simple Popup Manager <= 1.3.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-34803
Fastly <= 1.2.25 - Missing Authorization
Medium
CVE-2024-4619
Elementor Website Builder – More than Just a Page Builder <= 3.21.5 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.