Medium
CVE-2024-29090
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2024-27999
Preview E-mails for WooCommerce <= 2.2.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-2962
Networker - Tech News WordPress Theme with Dark Mode <= 1.1.9 - Missing Authorization
Medium
CVE-2024-29808
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.21 - Reflected Cross-Site Scripting via 'image_id'
Critical
CVE-2024-30237
Slider by Supsystic <= 1.8.10 - Authenticated (Admin+) SQL Injection
Medium
CVE-2024-29832
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.21 - Reflected Cross-Site Scripting via 'current_url'
Medium
CVE-2024-29809
Photo Gallery by 10Web – Mobile-Friendly Image Gallery <= 1.8.21 - Reflected Cross-Site Scripting via 'image_url'
Medium
CVE-2024-2906
Radio Player <= 2.0.73 - Missing Authorization via get_players
High
CVE-2024-30244
Church Admin <= 4.0.27 - Authenticated (Contributor+) SQL Injection
Medium
CVE-2024-27300
phpMyFAQ stored Cross-site Scripting at user email
High
CVE-2024-28105
phpMyFAQ's File Upload Bypass at Category Image Leads to RCE
Medium
CVE-2024-28106
phpMyFAQ Stored Cross-site Scripting at FAQ News Content
High
CVE-2024-28107
phpMyFAQ SQL injections at insertentry & saveentry
Medium
CVE-2024-28108
phpMyFAQ Stored HTML Injection at contentLink
Medium
CVE-2024-29179
phpMyFAQ Stored Cross-site Scripting at File Attachments
High
CVE-2024-27299
phpMyFAQ SQL Injection at "Save News"
Medium
CVE-2023-48296
Storefront user can access history and most viewed data from matching back-office user with the same ID
High
CVE-2024-29187
WiX based installers are vulnerable to binary hijack when run as SYSTEM
High
CVE-2024-29188
Malicious directory junction can cause WiX RemoveFoldersEx to possibly delete elevated files
Medium
CVE-2024-29025
Netty's HttpPostRequestDecoder can OOM
Medium
CVE-2024-29041
Express.js Open Redirect in malformed URLs
Medium
CVE-2023-45824
Pinned entity creation form shows wrong data
Medium
CVE-2024-28246
KaTeX missing normalization of the protocol in URLs allows bypassing forbidden protocols
Medium
CVE-2024-28245
KaTeX's `\includegraphics` does not escape filename
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.