Medium
CVE-2024-0378
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,405
Medium
CVE-2024-27950
Image Optimizer, Resizer and CDN – Sirv <= 7.2.0 - Missing Authorization
High
CVE-2024-2020
Calculated Fields Form Professional <= 5.1.56 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-1775
Nextend Social Login and Register <= 3.1.12 - Reflected Self-Based Cross-Site Scripting via error_description
Medium
CVE-2024-27094
OpenZeppelin Contracts base64 encoding may read from potentially dirty memory
Medium
CVE-2024-2001
Cockpit CMS Cross-Site Scripting vulnerability
Medium
CVE-2024-27906
Apache Airflow, versions before 2.8.2, has a vulnerability that allows authenticated users to view DAG code and import errors of DAGs they do not have permission to view through the API and the UI.
High
CVE-2024-22871
Reading specially crafted serializable objects from an untrusted source may cause an infinite loop and denial of service
Medium
CVE-2024-26470
FullStackHero's WebAPI Boilerplate host header injection vulnerability
Medium
CVE-2024-27516
livehelperchat Server-Side Template Injection
Medium
CVE-2023-51775
jose4j denial of service via specifically crafted JWE
Medium
CVE-2023-48653
Concrete CMS Cross Site Request Forgery (CSRF) vulnerability
Medium
CVE-2023-48651
Concrete CMS Cross Site Request Forgery (CSRF) vulnerability
Low
CVE-2023-49337
Concrete CMS Stored XSS
Medium
CVE-2023-48650
Concrete CMS Stored XSS in Layout Preset Name
Medium
CVE-2024-1413
Exclusive Addons for Elementor <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Timer Widget
High
CVE-2024-1793
AWeber – Free Sign Up Form and Landing Page Builder Plugin for Lead Generation and Email Newsletter Growth By AWeber <= 7.3.14 - Authenticated (Admin+) SQL Injection
Medium
CVE-2024-2761
Genesis Blocks <= 3.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via postTitleTag
Medium
CVE-2024-2028
Exclusive Addons for Elementor <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Covid-19 Stats Widget
High
CVE-2024-1859
Slider Responsive Slideshow – Image slider, Gallery slideshow <= 1.3.8 - Authenticated (Contributor+) PHP Object Injection
Medium
CVE-2024-1414
Exclusive Addons for Elementor <= 2.6.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Call To Action Widget
Medium
CVE-2023-6880
Visual Composer Premium <= 45.6.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1763
Wp Social Login and Register Social Counter <= 3.0.0 - Missing Authorization to Unauthenticated Social Login/Share Status Update
Medium
CVE-2024-1120
NextMove Lite – Thank You Page for WooCommerce & Finale Lite – Sales Countdown Timer & Discount for WooCommerce <= 2.17.0 - Missing Authorization to Unauthenticated System Information Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.