Critical
CVE-2024-25147
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,406
Critical
CVE-2024-1631
agent-js: Insecure Key Generation in `Ed25519KeyIdentity.generate`
High
CVE-2021-29050
Liferay Portal and Liferay DXP Vulnerable to Cross-Site Request Forgery in Terms of Use Page
Medium
CVE-2021-29038
Liferay Portal and Liferay DXP Does Not Obfuscate Password Reminder Answers
Medium
CVE-2024-26140
Cross-site Scripting Vulnerability in Statement Browser
High
CVE-2024-26135
MeshCentral cross-site websocket hijacking (CSWSH) vulnerability
High
CVE-2024-26134
cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) (RFC 8949) serialization format. Starting in version 5.5.1 and prior to version 5.6.2, an attacker can crash a
Medium
CVE-2024-26129
Path disclosure in JavaScript variable
Medium
CVE-2024-1393
Elementor Addon Elements <= 1.12.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Content Switcher Widget
High
CVE-2024-1505
Academy LMS – eLearning and online course solution for WordPress <= 1.9.19 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2024-1053
Event Tickets and Registration <= 5.8.1 - Missing Authorization
Medium
CVE-2024-0903
User Feedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds <= 1.0.13 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-1391
Elementor Addon Elements <= 1.12.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Thumbnail Slider Widget
Medium
CVE-2024-1462
Maintenance Page <= 1.0.8 - Security Mechanism Bypass via REST API
Medium
CVE-2024-1422
Elementor Addon Elements <= 1.12.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Modal Popup effet
Medium
CVE-2024-0973
Widget for Social Page Feeds <= 6.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-0820
Jobs for WordPress <= 2.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1392
Elementor Addon Elements <= 1.12.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Dual Button Widget
High
CVE-2024-1358
Elementor Addon Elements <= 1.12.12 - Directory Traversal to Local File Inclusion
Medium
CVE-2024-1370
Maintenance Page <= 1.0.8 - Missing Authorization to Sensitive Information Exposure
High
CVE-2024-25625
Pimcore Host Header Injection in user invitation link
High
CVE-2024-23830
MantisBT Host Header Injection vulnerability
Critical
CVE-2024-25141
Improper Certificate Validation in apache airflow mongo hook
High
CVE-2024-23114
Deserialization of Untrusted Data in Apache Camel CassandraQL
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.