Medium
CVE-2024-1074
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,404
Medium
CVE-2024-1977
Restaurant Solutions – Checklist 1.0.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-1854
Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates <= 4.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-0856
Appointment Booking Calendar <= 1.3.82 - Cross-Site Request Forgery
Medium
CVE-2023-6785
Download Manager <= 3.2.84 - Missing Authorization
Medium
CVE-2024-1978
Friends <= 2.8.5 - Authenticated (Admin+) Blind Server-Side Request Forgery
Medium
CVE-2024-1680
Premium Addons for Elementor <= 4.10.21 - Authenticated (Contributor+) Stored Cross-Site Scripting via Banner, Team Members, and Image Scroll Widgets
Medium
CVE-2024-1341
Advanced iFrame <= 2024.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-0614
Events Manager <= 6.4.6.4 - Authenticated(Administator+) Stored Cross-Site Scripting via settings
Medium
CVE-2023-6954
Download Manager <= 3.2.85 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-1982
WPvivid Backup and Migration <= 0.9.68 - Missing Authorization
Medium
CVE-2024-1383
WPvivid Backup for MainWP <= 0.9.32 - Reflected Cross-Site Scripting
Medium
CVE-2024-27189
WP Social Widget <= 2.2.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via shortcode
High
CVE-2023-45859
Missing permission checks on Hazelcast client protocol
Medium
ghsa-gp6m-fq6h-cjcx
Magento LTS vulnerable to stored XSS in admin file form
Medium
CVE-2024-21742
Apache James MIME4J improper input validation vulnerability
Medium
CVE-2023-50380
Apache Ambari XML External Entity injection
Medium
CVE-2024-25399
Subrion CMS vulnerable to Cross Site Scripting
High
CVE-2023-51747
SMTP smuggling in Apache James
High
CVE-2023-50379
Apache Ambari: authenticated users could perform command injection to perform RCE
Critical
CVE-2023-51518
Apache James server: Privilege escalation via JMX pre-authentication deserialization
Medium
CVE-2024-25711
diffoscope before 256 allows directory traversal via an embedded filename in a GPG file. Contents of any file, such as ../.ssh/id_rsa, may be disclosed to an attacker. This occurs because the value of
High
CVE-2023-36237
Bagisto Cross-Site Request Forgery vulnerability
Medium
CVE-2024-1476
Under Construction / Maintenance Mode from Acurax <= 2.6 - Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.