Medium
CVE-2024-29126
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,405
Medium
CVE-2024-29110
Table & Contact Form 7 Database – Tablesome <= 1.0.27 - Reflected Cross-Site Scripting
Medium
CVE-2024-29116
WooThumbs for WooCommerce by Iconic <= 5.5.3 - Reflected Cross-Site Scripting
Medium
CVE-2024-29122
FV Flowplayer Video Player <= 7.5.41.7212 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-2444
Inline Related Posts <= 3.4.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-29125
Coupon Affiliates <= 5.12.7 - Reflected Cross-Site Scripting
Medium
CVE-2024-29118
Scrollsequence <= 1.5.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-27351
Regular expression denial-of-service in Django
High
CVE-2024-28181
TurboBoost Commands vulnerable to arbitrary method invocation
High
CVE-2024-28252
CoreWCF NetFraming based services can leave connections open when they should be closed
Low
ghsa-879p-8gw4-mcpw
fgr Vulnerable to Insecure Default Variable Initialization
Medium
CVE-2024-2497
RaspAP Vulnerable to Code Injection via an Unknown Process in File `includes/provider.php`
Critical
CVE-2024-28752
SSRF vulnerability using the Aegis DataBinding in Apache CXF
Medium
CVE-2024-23944
Apache ZooKeeper vulnerable to information disclosure in persistent watchers handling
Medium
CVE-2024-2509
Gutenberg Blocks by Kadence Blocks <= 3.2.25 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-29099
Evergreen Content Poster <= 1.4.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-27997
Visual Composer Website Builder <= 45.6.0 - Authenticated (Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-29098
WP Calameo <= 2.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-6525
ElementsKit Elementor addons <= 3.0.3 - Authenticated(Editor+) Stored Cross-Site Scripting
Medium
CVE-2024-27987
GiveWP <= 3.3.1 - Reflected Cross-Site Scripting
Medium
CVE-2024-27995
ARMember <= 4.0.23 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-27990
The Moneytizer <= 9.5.20 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-27993
Calendarista Basic Edition <= 3.0.2 - Unauthenticated Cross-Site Scripting
High
CVE-2024-1812
Everest Forms <= 2.0.7 - Unauthenticated Server-Side Request Forgery via font_url
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.