High
CVE-2024-45855
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
CVE-2024-45854
Deserialization of untrusted data can occur in versions 23.10.3.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model to run arbitrary code on the server when a ‘describ
High
CVE-2024-45851
An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server. For databases creat
High
CVE-2024-45852
Deserialization of untrusted data can occur in versions 23.3.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded model to run arbitrary code on the server when interacted with.
High
CVE-2024-45853
Deserialization of untrusted data can occur in versions 23.10.2.0 and newer of the MindsDB platform, enabling a maliciously uploaded ‘inhouse’ model to run arbitrary code on the server when used for a
High
CVE-2024-45848
An arbitrary code execution vulnerability exists in versions 23.12.4.0 up to 24.7.4.1 of the MindsDB platform, when the ChromaDB integration is installed on the server. If a specially crafted ‘INSERT’
High
CVE-2024-45849
An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server. For databases creat
High
CVE-2024-45850
An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server. For databases creat
High
CVE-2024-45846
An arbitrary code execution vulnerability exists in versions 23.10.3.0 up to 24.7.4.1 of the MindsDB platform, when the Weaviate integration is installed on the server. If a specially crafted ‘SELECT
Medium
CVE-2024-8656
WPFactory Helper <= 1.7.0 - Reflected Cross-Site Scripting
High
CVE-2022-2446
WP Editor <= 1.2.9 - Authenticated (Admin+) PHAR Deserialization
Medium
CVE-2024-8734
Lucas String Replace <= 2.0.5 - Reflected Cross-Site Scripting
Medium
CVE-2024-45460
Flipping Cards <= 1.30 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-45455
WP Meta SEO <= 4.5.13 - Authenticated (Administrator+) Stored Cross-Site Scripting
High
CVE-2024-7423
Stream <= 4.0.1 - Cross-Site Request Forgery to Arbitrary Options Update
Medium
CVE-2024-45456
WP Meta SEO <= 4.5.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-45459
Product Slider for WooCommerce <= 1.13.50 - Reflected Cross-Site Scripting
Medium
CVE-2024-5628
Avada | Website Builder For WordPress & eCommerce <= 3.11.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via fusion_button Shortcode
Medium
CVE-2024-8731
Cron Jobs <= 1.2.9 - Reflected Cross-Site Scripting
High
CVE-2024-8269
MStore API – Create Native Android & iOS Apps On The Cloud <= 4.15.3 - Unauthorized User Registration
Medium
CVE-2024-45457
Spiffy Calendar <= 4.9.13 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-8714
WordPress Affiliates Plugin — SliceWP Affiliates <= 1.1.20 - Reflected Cross-Site Scripting
Medium
CVE-2024-45458
Spiffy Calendar <= 4.9.13 - Reflected Cross-Site Scripting
Medium
CVE-2024-43237
WordPress Tag Cloud Plugin – Tag Groups <= 2.0.3 - Missing Authorization to Information Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.