High
CVE-2024-1505
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2024-1053
Event Tickets and Registration <= 5.8.1 - Missing Authorization
Medium
CVE-2024-0903
User Feedback – Create Interactive Feedback Form, User Surveys, and Polls in Seconds <= 1.0.13 - Unauthenticated Stored Cross-Site Scripting
Medium
CVE-2024-1391
Elementor Addon Elements <= 1.12.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Thumbnail Slider Widget
Medium
CVE-2024-1462
Maintenance Page <= 1.0.8 - Security Mechanism Bypass via REST API
Medium
CVE-2024-1422
Elementor Addon Elements <= 1.12.12 - Authenticated(Contributor+) Stored Cross-Site Scripting via Modal Popup effet
Medium
CVE-2024-0973
Widget for Social Page Feeds <= 6.3 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-0820
Jobs for WordPress <= 2.7.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2024-1392
Elementor Addon Elements <= 1.12.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via Dual Button Widget
High
CVE-2024-1358
Elementor Addon Elements <= 1.12.12 - Directory Traversal to Local File Inclusion
Medium
CVE-2024-1370
Maintenance Page <= 1.0.8 - Missing Authorization to Sensitive Information Exposure
High
CVE-2024-25625
Pimcore Host Header Injection in user invitation link
High
CVE-2024-23830
MantisBT Host Header Injection vulnerability
Critical
CVE-2024-25141
Improper Certificate Validation in apache airflow mongo hook
High
CVE-2024-23114
Deserialization of Untrusted Data in Apache Camel CassandraQL
High
CVE-2024-22369
Deserialization of Untrusted Data in Apache Camel SQL
Medium
CVE-2024-26268
Liferay Portal and Liferay DXP User Enumeration Vulnerability
Medium
CVE-2024-26270
Liferay Portal and Liferay DXP vulnerable to theft of hashed password
Critical
CVE-2024-25610
Liferay Portal has a Stored XSS with Blog entries (Insecure defaults)
Medium
CVE-2024-26267
Liferay Portal and Liferay DXP HTTP Header Can Expose Versions
Medium
CVE-2024-26265
Liferay Portal vulnerable to Denial of Service
High
CVE-2024-25607
Liferay Portal defaults to a low work factor for the default password hashing algorithm
Medium
CVE-2024-25609
Liferay Portal and Liferay DXP's HtmlUtil.escapeRedirect Can Be Circumvented via Two Forward Slashes
Medium
CVE-2024-25608
Liferay Portal and Liferay DXP's HtmlUtil.escapeRedirect Can Be Circumvented via Replacement Character
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.