High
CVE-2024-45398
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2024-5998
LangChain pickle deserialization of untrusted data
High
CVE-2024-9796
WordPress WP-Advanced-Search <= 3.3.9 - Unauthenticated SQL Injection
Critical
CVE-2024-8853
Webo-facto <= 1.40 - Unauthenticated Privilege Escalation
Medium
CVE-2024-8983
Custom Twitter Feeds – A Tweets Widget or X Feed Widget <= 2.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-6641
WP Hardening – Fix Your WordPress Security <= 1.2.6 - Unauthenticated Security Feature Bypass to Username Enumeration
High
CVE-2024-22303
Houzez <= 3.2.4 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2024-9021
Relevanssi – A Better Search <= 4.23.0 (Free) and <= 2.26.0 (Premium) - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-45801
DOMPurify allows tampering by prototype pollution
High
CVE-2024-8761
Share This Image <= 2.03 - Open Redirect via link Parameter
Medium
CVE-2024-8661
Concrete CMS Stored XSS in the "Next&Previous Nav" block
Medium
CVE-2024-39772
Mattermost Desktop App fails to safeguard screen capture functionality
Low
CVE-2024-45835
Mattermost Desktop App fails to sufficiently configure Electron Fuses
Medium
CVE-2024-46943
OpenDaylight Authentication, Authorization and Accounting (AAA) peer impersonation vulnerability
High
CVE-2024-46942
OpenDaylight Model-Driven Service Abstraction Layer (MD-SAL) allows follower controller to set up flow entries
Critical
CVE-2024-22399
Apache Seata Deserialization of Untrusted Data vulnerability
Medium
CVE-2024-39613
Mattermost Desktop App Uncontrolled Search Path Vulnerability
Medium
CVE-2024-44008
Geo Mashup <= 1.13.12 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-45451
Roseta <= 1.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-44050
Verbosa <= 1.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-44007
SKT Templates – Elementor & Gutenberg templates <= 6.14 - Reflected Cross-Site Scripting
Medium
CVE-2024-45453
Maintenance Redirect <= 2.0.1 - IP Spoofing to Maintenance Mode Bypass
Medium
CVE-2024-45452
Septera <= 1.5.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-8617
Quiz Maker <= 6.5.9.8 - Authenticated (Admin+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.