High
CVE-2024-1935
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,404
Medium
CVE-2024-1234
Exclusive Addons for Elementor <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-25839
Exposure of Sensitive Information to an Unauthorized Actor in Webbax - Super Newsletter module for PrestaShop
High
CVE-2024-25844
Exposure of Private Personal Information to an Unauthorized Actor in Common-Services - So Flexibilite module for PrestaShop
Critical
CVE-2024-25847
Improper neutralization of SQL parameter in MyPrestaModules - Product Catalog (CSV, Excel) Import module for PrestaShop
Critical
CVE-2024-26469
Server-Side Request Forgery (SSRF) in Tunis Soft - Product Designer for PrestaShop
Critical
CVE-2024-24302
Deserialization of Untrusted Data in Tunis Soft - Product Designer module for PrestaShop
High
CVE-2024-24307
Improper Limitation of a Pathname to a Restricted Directory in Tunis Soft - Product Designer module for PrestaShop
Critical
CVE-2024-25842
External Control of File Name or Path in Presta World - Account Manager - Sales Representative & Dealers - CRM module for PrestaShop
Unrated
CVE-2024-13250
drupal/symfony_mailer_lite - SA-CONTRIB-2024-014
Unrated
CVE-2024-13248
drupal/private_content - SA-CONTRIB-2024-012
Unrated
CVE-2024-13247
drupal/coffee - SA-CONTRIB-2024-011
Medium
CVE-2024-24779
Apache Superset: Improper data authorization when creating a new dataset
Medium
CVE-2024-26016
Apache Superset: Improper authorization validation on dashboards and charts import
Medium
CVE-2024-24773
Apache Superset: Improper validation of SQL statements allows for unauthorized access to data
Medium
CVE-2024-24772
Apache Superset: Improper Neutralization of custom SQL on embedded context
Medium
CVE-2024-27315
Apache Superset: Improper error handling on alerts
Medium
CVE-2024-22723
Webtrees Path Traversal vulnerability
Critical
CVE-2024-1981
WPvivid Backup and Migration <= 0.9.68 - Unauthenticated SQL Injection
Medium
CVE-2024-0337
Travelpayouts: All Travel Brands in One Place <= 1.1.16 - Open Redirect
Medium
CVE-2024-0689
Custom Field Suite <= 2.6.4 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2024-1468
Avada | Website Builder For WordPress & WooCommerce <= 7.11.4 - Authenticated (Contributor+) Arbitrary File Upload
Medium
CVE-2023-7246
System Dashboard <= 2.8.9 - Reflected Cross-Site Scripting via X-Forwarded-For
Medium
CVE-2024-1976
Marketing Optimizer <= 20200925 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.