High
CVE-2024-27194
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,426
Medium
CVE-2024-1907
Categorify <= 1.0.7.4 - Cross-Site Request Forgery via categorifyAjaxDeleteCategory
Medium
CVE-2024-1323
Orbit Fox by ThemeIsle <= 2.10.30 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-21502
Versions of the package fastecdsa before 2.3.2 are vulnerable to Use of Uninitialized Variable on the stack, via the curvemath_mul function in src/curveMath.c, due to being used and interpreted as use
Medium
CVE-2024-21501
sanitize-html Information Exposure vulnerability
Critical
CVE-2024-27133
Insufficient sanitization in MLflow leads to XSS when running a recipe that uses an untrusted dataset. This issue leads to a client-side RCE when running the recipe in Jupyter Notebook. The vulnerabil
Critical
CVE-2024-27132
Insufficient sanitization in MLflow leads to XSS when running an untrusted recipe.
High
CVE-2024-23320
Apache DolphinScheduler vulnerable to arbitrary JavaScript execution as root for authenticated users
High
CVE-2024-27318
Onnx Directory Traversal vulnerability
Medium
CVE-2024-27319
Onnx Out-of-bounds Read vulnerability
High
CVE-2024-26150
`@backstage/backend-common` vulnerable to path traversal through symlinks
High
CVE-2024-22243
Spring Web vulnerable to Open Redirect or Server Side Request Forgery
High
CVE-2022-25377
Appwrite Directory Traversal vulnerability
Medium
CVE-2024-1291
Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-1311
Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Arbitrary File Upload
Medium
CVE-2024-1806
ProfilePress <= 4.15.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via profilepress-edit-profile Shortcode
Medium
CVE-2024-1365
YML for Yandex Market <= 4.2.3 - Reflected Cross-Site Scripting
Medium
85e17f3a-cec1-41de-b3e2-ac06a9c9290f
KODO Qiniu <= 1.5.0 - Cross-Site Request Forgery
Medium
CVE-2024-1165
Brizy – Page Builder <= 2.4.39 - Authenticated (Contributor+) Directory Traversal
Medium
CVE-2024-1293
Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1758
SuperFaktura WooCommerce <= 1.40.3 - Authenticated (Subscriber+) Blind Server-Side Request Forgery
Medium
CVE-2024-0976
WP Event Manager <= 3.1.41 - Reflected Cross-Site Scripting via plugin
Low
CVE-2023-5775
BackWPup <= 4.0.2 - Plaintext Storage of Backup Destination Password
Medium
CVE-2024-1296
Brizy – Page Builder <= 2.4.40 - Authenticated (Contributor+) Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.