Medium
CVE-2024-47164
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2024-47166
Gradio has a one-level read path traversal in `/custom_component`
High
CVE-2024-47084
Gradios's CORS origin validation is not performed when the request has a cookie
Low
ghsa-26jh-r8g2-6fpr
Gradio's dropdown component pre-process step does not limit the values to those in the dropdown list
Medium
CVE-2024-7514
WordPress Comments Import & Export <= 2.3.7 - Authenticated (Author+) Arbitrary File Read via Directory Traversal
Medium
CVE-2024-9507
Contact Form by Bit Form: Multi Step Form, Calculation Contact Form, Payment Contact Form & Custom Contact Form builder <= 2.15.2 - Authenticated (Administrator+) Improper Input Validation via iconUpload Function to Arbitrary File Read
Medium
CVE-2024-9051
WP Ultimate Post Grid <= 3.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via wpupg-grid-with-filters Shortcode
Medium
CVE-2024-9616
BlockMeister – Block Pattern Builder <= 3.1.10 - Reflected Cross-Site Scripting
Low
CVE-2024-45149
Magento Open Source Improper Access Control vulnerability
High
CVE-2024-45132
Magento Open Source Improper Authorization vulnerability
Medium
CVE-2024-45131
Magento Open Source Improper Authorization vulnerability
Medium
CVE-2024-45135
Magento Open Source Improper Access Control vulnerability
Medium
CVE-2024-45134
Magento Open Source Information Exposure vulnerability
Medium
CVE-2024-45133
Magento Open Source Information Exposure vulnerability
Medium
CVE-2024-45119
Magento Open Source Server-Side Request Forgery (SSRF) vulnerability
Medium
CVE-2024-45128
Magento Open Source Improper Authorization vulnerability
Medium
CVE-2024-45123
Magento Open Source reflected Cross-Site Scripting (XSS) vulnerability
Medium
CVE-2024-45121
Magento Open Source Improper Access Control vulnerability
Medium
CVE-2024-45129
Magento Open Source Improper Access Control vulnerability
Medium
CVE-2024-45120
Magento Open Source Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability
Medium
CVE-2024-45130
Magento Open Source Improper Access Control vulnerability
Medium
CVE-2024-45116
Magento Open Source Cross-Site Scripting (XSS) vulnerability
Medium
CVE-2024-45122
Magento Open Source Improper Access Control vulnerability
High
CVE-2024-45118
Magento Open Source Improper Access Control vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.