Medium
CVE-2024-8871
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Critical
CVE-2024-6581
A vulnerability in the discussion image upload function of the Lollms application, version v9.9, allows for the uploading of SVG files. Due to incomplete filtering in the sanitize_svg function, this c
Medium
CVE-2024-7774
Langchain Path Traversal vulnerability
Low
CVE-2024-7042
@langchain/community SQL Injection vulnerability
High
CVE-2024-49769
Waitress vulnerable to DoS leading to high CPU usage/resource exhaustion
Critical
CVE-2024-49768
Waitress has request processing race condition in HTTP pipelining with invalid first request
Medium
CVE-2024-8792
Subscribe to Comments <= 2.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-9885
Widget or Sidebar Shortcode <= 0.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-8627
Ultimate TinyMCE <= 5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-9886
WP Baidu Map <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2024-9846
Enable Shortcodes inside Widgets,Comments and Experts <= 1.0.0 - Unauthenticated Arbitrary Shortcode Execution
Medium
CVE-2024-9884
T(-) Countdown <= 2.4.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
High
CVE-2024-7807
A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240628 allows for a Denial of Service (DOS) attack. When uploading a file, if an attacker appends a large number of characters to the end of a m
Medium
CVE-2024-8143
In the latest version (20240628) of gaizhenbiao/chuanhuchatgpt, an issue exists in the /file endpoint that allows authenticated users to access the chat history of other users. When a user logs in, a
High
CVE-2024-7962
An arbitrary file read vulnerability exists in gaizhenbiao/chuanhuchatgpt version 20240628 due to insufficient validation when loading prompt template files. An attacker can read any file that matches
Medium
CVE-2024-45477
Apache NiFi Cross-site Scripting vulnerability
High
CVE-2024-7985
FileOrganizer <= 1.0.9 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-10226
Arconix Shortcodes <= 2.1.13 - Authenticated (Contributor+) Stored Cross-Site Scripting via box Shortcode
Medium
CVE-2024-9505
Beaver Builder – WordPress Page Builder <= 2.8.4.2 - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Button Widget
Medium
CVE-2024-10103
MailPoet <= 5.3.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-2869
Easy Property Listings <= 3.5.3 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2024-50550
LiteSpeed Cache <= 6.5.1 - Unauthenticated Privilege Escalation
Medium
CVE-2024-4665
EventPrime – Events Calendar, Bookings and Tickets <= 3.5.0 - Insecure Direct Object Reference to (Subscriber+) Arbitrary Booking Update
Medium
CVE-2023-5816
Code Explorer <= 1.4.5 - Authenticated (Admin+) External File Reading
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.