Medium
CVE-2024-48911
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2024-6763
Eclipse Jetty URI parsing of invalid authority
Medium
CVE-2024-8184
Eclipse Jetty's ThreadLimitHandler.getRemote() vulnerable to remote DoS attacks
Low
CVE-2024-6762
Eclipse Jetty's PushSessionCacheFilter can cause remote DoS attacks
Medium
CVE-2024-7318
Keycloaks's One Time Passcode (OTP) is valid longer than expiration timeSeverity
Medium
CVE-2024-8883
Keycloak has Vulnerable Redirect URI Validation Results in Open Redirect
High
CVE-2024-8698
Improper Verification of SAML Responses Leading to Privilege Escalation in Keycloak
Medium
CVE-2024-47885
DOM Clobbering Gadget found in astro's client-side router that leads to XSS
Medium
CVE-2024-9895
Smart Online Order for Clover <= 1.5.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via moo_receipt_link Shortcode
Medium
CVE-2024-47831
Denial of Service condition in Next.js image optimization
High
CVE-2024-9837
AADMY – Add Auto Date Month Year Into Posts <= 2.0.1 - Unauthenticated Arbitrary Shortcode Execution
High
CVE-2023-50780
Apache ActiveMQ Artemis: Authenticated users could perform RCE via Jolokia MBeans
Medium
CVE-2024-9944
WooCommerce <= 9.0.2 - Unauthenticated HTML Injection
Medium
CVE-2024-9823
Eclipse Jetty has a denial of service vulnerability on DosFilter
Medium
CVE-2024-6757
Elementor <= 3.23.5 - Authenticated (Contributor+) Basic Information Exposure via get_image_alt Function
Medium
CVE-2024-9546
WPIDE <= 3.4.9 - Unauthenticated Full Path Dislcosure
High
CVE-2024-9548
Slimstat Analytics <= 5.2.6 - Unauthenticated Stored Cross-Site Scripting
Critical
CVE-2024-49257
Azz Anonim Posting <= 0.9 - Unauthenticated Arbitrary File Upload
Medium
CVE-2024-49262
Country Flags for Elementor <= 1.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-49217
Adding drop down roles in registration <= 1.1 - Unauthenticated Privilege Escalation
Medium
CVE-2024-49268
Disconnected <= 1.3.0 - Reflected Cross-Site Scripting
Medium
CVE-2024-49273
ProfileGrid <= 5.9.3 - Cross-Site Request Forgery
Medium
CVE-2024-49240
AB Categories Search Widget <= 0.2.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-49274
VOD Infomaniak <= 1.5.7 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.