Medium
CVE-2024-30199
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,405
Medium
CVE-2024-29925
Post Grid, Slider & Carousel Ultimate <= 1.6.6 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-29936
Image Hover Effects – Elementor Addon <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'eihe_align'
Medium
CVE-2024-29930
Crypto Converter Widget <= 1.8.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
High
CVE-2024-28850
WP Crontrol <= 1.16.1 - Remote Code Execution
Medium
CVE-2024-2583
Shortcodes Ultimate <= 7.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'note_color' Shortcode
High
CVE-2024-29190
SSRF Vulnerability on assetlinks_check(act_name, well_knowns)
High
CVE-2023-5685
XNIO denial of service vulnerability
Medium
CVE-2024-29338
Cross-Site Request Forgery in Anchor CMS
High
CVE-2024-29499
Cross-Site Request Forgery in Anchor CMS
Medium
CVE-2024-29186
Slow String Operations via MultiPart Requests in Event-Driven Functions
Medium
CVE-2024-29042
Cache Poisoning Vulnerability
Medium
CVE-2024-28863
Denial of service while parsing a tar file due to lack of folders count validation
Medium
CVE-2024-28861
Gadget chain in Symfony 1 due to uncontrolled unserialized input in sfNamespacedParameterHolder
High
CVE-2024-28119
Server Side Template Injection (SSTI) via Twig escape handler
High
CVE-2024-28118
Server Side Template Injection (SSTI)
High
CVE-2024-28117
Server Side Template Injection (SSTI)
High
CVE-2024-28116
Server-Side Template Injection (SSTI) with Grav CMS security sandbox bypass
High
CVE-2024-27921
Grav File Upload Path Traversal
Medium
CVE-2024-28593
Cross-site Scripting in Moodle Chat
Medium
CVE-2024-29272
VvvebJs Arbitrary File Upload vulnerability
Medium
CVE-2024-29271
VvvebJs Reflected Cross-Site Scripting (XSS) vulnerability
Medium
CVE-2024-2131
Move Addons for Elementor <= 1.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-2468
EmbedPress <= 3.9.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Widget Attribute
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.