High
CVE-2024-34145
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2024-4029
Wildfly vulnerable to denial of service
Medium
CVE-2024-34146
Jenkins Git server Plugin does not perform a permission check
Low
CVE-2024-34147
Jenkins Telegram Bot Plugin stores the Telegram Bot token in plaintext
Medium
CVE-2024-34148
Jenkins Subversion Partial Release Manager Plugin programmatically disables the fix for CVE-2016-3721
Low
CVE-2024-4128
Firebase vulnerable to CRSF attack
Critical
CVE-2024-3955
CraftBeerPi 4 allows arbitrary code execution
High
CVE-2024-32114
Apache ActiveMQ's default configuration doesn't secure the API web context
Medium
CVE-2024-3918
Pet Manager <= 1.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2024-3070
Last Viewed Posts by WPBeginner <= 1.0.0 - Unauthenticated PHP Object Injection
Medium
CVE-2024-3917
Pet Manager <= 1.4 - Reflected Cross-Site Scripting
Medium
CVE-2024-3991
ShopLentor – WooCommerce Builder for Elementor & Gutenberg +12 Modules – All in One Solution (formerly WooLentor) <= 2.8.7 - Authenticated (contributor+) Stored Cross-Site Scripting via _id
Medium
CVE-2024-3920
Flattr <= 1.2.2 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-4433
Simple Image Popup <= 2.4.0 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-4107
Elementor Website Builder Pro <= 3.21.0 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting
Medium
CVE-2024-2220
Button contact VR <= 4.7 - Authenticated (Admin+) Stored Cross-Site Scripting
High
CVE-2024-25355
s3-url-parser vulnerable to Denial of Service via regexes component
Critical
CVE-2024-32962
xml-crypto vulnerable to XML signature verification bypass due improper verification of signature/signature spoofing
Low
CVE-2024-31573
XMLUnit for Java has Insecure Defaults when Processing XSLT Stylesheets
High
CVE-2023-36821
Uptime Kuma vulnerable to authenticated remote code execution via malicious plugin installation
Medium
CVE-2023-36822
Uptime Kuma's authenticated path traversal via plugin repository name may lead to unavailability or data loss
Critical
CVE-2024-33768
lunasvg v2.3.9 was discovered to contain a segmentation violation via the component composition_solid_source_over.
Medium
CVE-2024-33766
lunasvg v2.3.9 was discovered to contain an FPE (Floating Point Exception) at blend_transformed_tiled_argb.isra.0.
Medium
CVE-2024-33767
lunasvg v2.3.9 was discovered to contain a segmentation violation via the component composition_solid_source.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.