Medium
CVE-2024-4003
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,528
High
CVE-2024-3047
PDF Invoices & Packing Slips for WooCommerce <= 3.8.0 - Unauthenticated Server-Side Request Forgery
Medium
CVE-2024-3822
Base64 Encoder/Decoder <= 0.9.2 - Reflected Cross-Site Scripting
Medium
CVE-2024-3630
HL Twitter <= 2014.1.18 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-4035
Photo Gallery - GT3 Image Gallery & Gutenberg Block Gallery <= 2.7.7.21 - Authenticated (Author+) Cross-Site Scripting
Medium
CVE-2024-3629
HL Twitter <= 2014.1.18 - Cross-Site Request Forgery to Settings Update
Medium
CVE-2024-3748
SP Project & Document Manager <= 4.71 - Insecure Direct Object Reference
Critical
CVE-2014-8089
Zend Framework SQL injection vulnerability
High
CVE-2024-32866
Conform contains a Prototype Pollution Vulnerability in `parseWith...` function
Critical
CVE-2024-28253
OpenMetadata vulnerable to SpEL Injection in `PUT /api/v1/policies` (`GHSL-2023-252`)
Medium
CVE-2024-31208
Synapse V2 state resolution weakness allows Denial of Service (DoS)
Medium
ghsa-w228-rfpx-fhm4
cg vulnerable to an Open Redirect Vulnerability on Referer Header
Medium
CVE-2024-58376
Renovate vulnerable to arbitrary command injection via helmv3 manager and registryAliases
Medium
CVE-2024-32869
Hono vulnerable to Restricted Directory Traversal in serveStatic with deno
Critical
CVE-2024-21511
MySQL2 for Node Arbitrary Code Injection
Medium
CVE-2024-2324
FileOrganizer and FileOrganizer Pro <= 1.0.6 - Authenticated Stored Cross-Site Scripting
High
CVE-2024-32960
Booking Ultra Pro <= 1.1.12 - Authenticated (Contributor+) Privilege Escalation
Medium
CVE-2023-7030
Collapse-O-Matic <= 1.8.5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2024-4077
UDesign <= 4.7.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-32958
Slash Admin <= 3.8.1 - Cross-Site Request Forgery
Medium
CVE-2024-32957
Page Builder: Live Composer <= 1.5.38 - Missing Authorization
High
CVE-2024-3895
WP Datepicker <= 2.1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
Medium
CVE-2024-3885
Premium Addons for Elementor <= 4.10.28 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-3241
Ultimate Blocks <= 3.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Advanced Heading
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.