Critical
CVE-2024-34461
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2024-34460
Zenario's Tree Explorer tool from Organizer affected by Cross-site Scripting
Medium
CVE-2024-34075
kurwov vulnerable to Denial of Service due to improper data sanitization
Medium
CVE-2024-34067
Pterodactyl panel's admin area vulnerable to Cross-site Scripting
Medium
CVE-2024-34447
Bouncy Castle Java Cryptography API vulnerable to DNS poisoning
Low
CVE-2024-31636
An issue in LIEF v.0.14.1 allows a local attacker to obtain sensitive information via the name parameter of the machd_reader.c component.
Medium
CVE-2024-34449
Vditor allows Cross-site Scripting via an attribute of an `A` element
Medium
CVE-2023-35701
Apache Hive Code Injection vulnerability
Medium
CVE-2024-34367
Popup box <= 4.1.2 - Cross-Site Request Forgery
High
CVE-2024-3240
ConvertPlug <= 3.5.25 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2024-34380
Conversational Forms for ChatBot <= 1.2.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-34381
PropertyHive <= 2.0.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-6854
Breakdance <= 1.7.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via custom postmeta
Medium
CVE-2024-34373
The Plus Addons for Elementor Page Builder Lite <= 5.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-34384
Sina Extension for Elementor <= 3.5.1 - Authenticated (Contributor+) Local File Inclusion
Medium
CVE-2024-3868
Folders Pro <= 3.0.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via User First Name and Last Name
Medium
CVE-2024-1050
Import and export users and customers <= 1.26.5 - Missing Authorization
Medium
CVE-2024-4193
Testimonial Slider <= 1.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-34368
Mooberry Book Manager <= 4.15.12 - Unauthenticated Information Exposure via Export Files
Medium
CVE-2024-34372
Post Grid Master <= 3.4.7 - Missing Authorization
Critical
CVE-2024-34434
WordPress Meta Data and Taxonomies Filter (MDTF) <= 1.3.3.2 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2024-34383
SEOPress <= 7.6.1 - Information Exposure
Medium
CVE-2024-34382
Robo Gallery <= 3.2.18 - Unauthenticated Information Exposure
Medium
CVE-2024-1230
SimpleShop <= 2.10.0 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.