High
CVE-2024-27951
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,404
High
CVE-2024-27955
Automatic <= 3.92.0 - Cross-Site Request Forgery to Privilege Escalation
Medium
CVE-2024-1641
Accordion <= 2.2.96 - Missing Authorization to Authenticated(Contributor+) Post Duplication
Medium
CVE-2024-2185
Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Image Box Widget
Medium
CVE-2024-2187
Beaver Builder Addons by WPZOOM <= 1.3.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Testimonials Widget
High
CVE-2024-27135
Apache Pulsar: Improper Input Validation in Pulsar Function Worker allows Remote Code Execution
Medium
CVE-2024-28098
Apache Pulsar: Improper Authorization For Topic-Level Policy Management
High
CVE-2022-34321
Apache Pulsar: Improper Authentication for Pulsar Proxy Statistics Endpoint
High
CVE-2024-27894
Apache Pulsar: Pulsar Functions Worker Allows Unauthorized File Access and Unauthorized HTTP/HTTPS Proxying
Critical
CVE-2024-27317
Apache Pulsar: Pulsar Functions Worker's Archive Extraction Vulnerability Allows Unauthorized File Modification
Medium
CVE-2024-27305
aiosmtpd vulnerable to SMTP smuggling
Medium
CVE-2024-28239
URL Redirection to Untrusted Site in OAuth2/OpenID in directus
Low
CVE-2024-28238
Session Token in URL in directus
High
CVE-2024-21392
Microsoft Security Advisory CVE-2024-21392: .NET Denial of Service Vulnerability
High
CVE-2024-27758
RPyC's missing security check results in code execution when using numpy.array on the server-side.
High
CVE-2024-28121
StimulusReflex arbitrary method call
Medium
CVE-2024-24716
Awesome Support <= 6.1.6 - Insufficient Authorization via wpas_can_delete_attachments()
High
CVE-2023-7072
Post Grid Combo – 36+ Gutenberg Blocks <= 2.2.68 - Information Exposure via get_posts API Endpoint
Medium
CVE-2024-1894
Burst Statistics – Privacy-Friendly Analytics for WordPress <= 1.5.6.1 - Authenticated(Contributor+) Stored Cross-Site Scripting via burst_total_pageviews_count
High
CVE-2024-0386
weForms <= 1.6.21 - Unauthenticated Stored Cross-Site Scripting via Referer
High
CVE-2024-0368
Hustle <= 7.8.3 - Sensitive Information Exposure via Exposed Hubspot API Keys
Medium
CVE-2024-2130
CWW Companion <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-22144
Anti-Malware Security and Brute-Force Firewall <= 4.21.96 - Unauthenticated Remote Code Execution
Medium
CVE-2024-2286
Sky Addons for Elementor <= 2.4.0 - Authenticated(Contributor+) Stored Cross-site scripting via Wrapper Link URL
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.