Medium
CVE-2024-1958
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2024-3903
Add Custom CSS and JS <= 1.20 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Critical
CVE-2024-31077
Forminator <= 1.29.2 - Authenticated (Admin+) SQL Injection
Medium
CVE-2024-3590
LetterPress – Elevate Your WordPress Site's E-Mail Campaigns and Marketing <= 1.2.2 - Cross-Site Request Forgery
Medium
CVE-2023-5971
Save as PDF Plugin by Pdfcrowd <= 3.1.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Low
ghsa-82jv-9wjw-pqh6
Prototype pollution in emit function
Medium
CVE-2024-32472
Stored Cross-site Scripting (XSS) in excalidraw's web embed component
Medium
CVE-2024-31580
PyTorch before v2.2.0 was discovered to contain a heap buffer overflow vulnerability in the component /runtime/vararg_functions.cpp. This vulnerability allows attackers to cause a Denial of Service (D
High
CVE-2024-31583
Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp.
Low
CVE-2023-0657
Keycloak vulnerable to impersonation via logout token exchange
Medium
CVE-2023-6787
Keycloak vulnerable to session hijacking via re-authentication
High
CVE-2024-1132
Keycloak path traversal vulnerability in redirection validation
High
CVE-2024-1249
Keycloak's unvalidated cross-origin messages in checkLoginIframe leads to DDoS
Medium
CVE-2023-6484
Keycloak vulnerable to log Injection during WebAuthn authentication or registration
High
CVE-2024-21409
.NET Elevation of Privilege Vulnerability
High
CVE-2024-30253
Handling untrusted input can result in a crash, leading to loss of availability / denial of service
Medium
CVE-2024-29035
Blind SSRF Leads to Port Scan by using Webhooks
Medium
CVE-2023-6544
Keycloak Authorization Bypass vulnerability
Medium
CVE-2023-6717
Keycloak Cross-site Scripting (XSS) via assertion consumer service URL in SAML POST-binding flow
Medium
CVE-2023-3597
Keycloak secondary factor bypass in step-up authentication
High
CVE-2024-2419
Keycloak path traversal vulnerability in the redirect validation
Medium
CVE-2024-3825
BlazeMeter Jenkins plugin vulnerable to Cross-Site Request Forgery
High
CVE-2024-31503
Dolibarr vulnerable to Cross-Site Request Forgery
High
CVE-2024-3849
Click to Chat – HoliThemes <= 3.35 - Authenticated (Contributor+) Local File Inclusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.