Medium
CVE-2024-31928
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2024-31432
Restrict Content <= 3.2.8 - Missing Authorization
Medium
CVE-2024-31932
Blocksy Companion <= 2.0.28 - Cross-Site Request Forgery
Medium
CVE-2024-2966
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.5.6 - Sensitive Information Exposure via element_pack_ajax_search
Medium
CVE-2024-31424
Login with phone number <= 1.6.93 - Cross-Site Request Forgery
Medium
CVE-2024-0710
GP Unique ID <= 1.5.5 - Unauthenticated Form Submission Unique ID Modification
Medium
CVE-2024-31381
Spotlight Social Media Feeds <= 1.6.10 - Cross-Site Request Forgery
Medium
CVE-2024-31925
F4 Improvements <= 1.8.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-3285
Slider, Gallery, and Carousel by MetaSlider – Responsive WordPress Slideshows <= 3.70.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via metaslider Shortcode
Medium
CVE-2024-31374
AppPresser <= 4.3.0 - Cross-Site Request Forgery via force_logging_off()
Medium
CVE-2024-31942
Calendarista Basic Edition <= 3.0.2 - Cross-Site Request Forgery
High
CVE-2023-6811
Language Translate Widget for WordPress – ConveyThis <= 223 - Unauthenticated Stored Cross-Site Scripting via api_key
Medium
CVE-2024-31924
EWWW Image Optimizer <= 7.2.3 - Cross-Site Request Forgery
Medium
CVE-2024-28234
Contao: Insufficient BBCode sanitizer
Low
CVE-2024-28191
Contao: Unencoded insert tags in the frontend
Medium
CVE-2024-28190
Contao: Cross site scripting in the file manager
Medium
CVE-2024-31867
Apache Zeppelin: LDAP search filter query Injection Vulnerability
Medium
CVE-2024-29992
Azure Identity Library for .NET Information Disclosure Vulnerability
Critical
CVE-2024-31864
Apache Zeppelin remote code execution by adding malicious JDBC connection string
Medium
CVE-2024-31868
Apache Zeppelin vulnerable to cross-site scripting in the helium module
Critical
CVE-2024-31866
Improper escaping in Apache Zeppelin
Medium
CVE-2024-31865
Apache Zeppelin: Cron arbitrary user impersonation with improper privileges
Medium
CVE-2024-30262
Contao: Remember-me tokens will not be cleared after a password change
High
CVE-2024-28235
Contao: Possible cookie sharing with external domains while checking protected pages for broken links
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.