Critical
CVE-2024-34990
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Critical
CVE-2024-34994
Improper neutralization of SQL parameter in Channable module for PrestaShop
Critical
CVE-2024-34993
Improper neutralization of SQL parameter in Buy Addons - Bulk Export products to Google Merchant-Google Shopping module for PrestaShop
Medium
CVE-2024-37895
Lobe Chat API Key Leak
Medium
CVE-2024-37893
Firefly III has a MFA bypass in oauth flow
High
CVE-2024-36543
STRIMZI incorrect access control
Critical
CVE-2024-37902
DeepJavaLibrary API absolute path traversal
Medium
CVE-2024-5533
Divi <= 4.25.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-37890
ws affected by a DoS when handling a request with many HTTP headers
Medium
CVE-2024-36578
@akbr/update Prototype Pollution
Critical
CVE-2024-36573
obx Prototype Pollution
Medium
CVE-2024-36574
flatten-json Prototype Pollution
High
CVE-2024-36577
Object Resolver Prototype Pollution
High
CVE-2024-36581
Badger Database Prototype Pollution
Medium
CVE-2024-36582
object-deep-assign Prototype Pollution
Medium
CVE-2024-36580
@cdr0/sg Prototype Pollution
Medium
CVE-2024-0845
PDF Viewer for Elementor <= 2.9.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via render
Medium
CVE-2024-4375
Master Slider – Responsive Touch Slider <= 3.9.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via ms_layer Shortcode
Medium
CVE-2024-1634
Scheduling Plugin – Online Booking for WordPress <= 3.5.10 - Missing Authorization to Unauthenticated Service Disconnection
Medium
CVE-2024-5541
Ibtana - WordPress Website Builder <= 1.2.3.3 - Unauthenticated reCAPTCHA Settings Update
High
CVE-2023-5527
Business Directory Plugin <= 6.4.3 - Authenticated (Author+) CSV Injection
Medium
CVE-2024-5860
Tickera <= 3.5.2.8 - Missing Authorization to Authenticated (Susbcriber+) Ticket Deletion
Medium
CVE-2024-35763
Excellent <= 1.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-35762
Serious Slider <= 1.2.4 - Authenticated (Editor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.