Medium
CVE-2024-24711
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2024-24705
Accessibility <= 1.0.6 - Cross-Site Request Forgery
Medium
CVE-2024-24714
Icons Font Loader <= 1.1.4 - Authenticated(Administrator+) Arbitrary File Upload
Medium
CVE-2024-24803
Ultra Companion <= 1.1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2023-7069
Advanced iFrame <= 2023.10 - Authenticated (Contributor+) Stored Cross-Site Scripting
High
CVE-2024-24703
MultiVendorX Marketplace <= 4.0.25 - Missing Authorization
Medium
CVE-2024-0907
NEX-Forms – Ultimate Form Builder – Contact forms and much more <= 8.5.6 - Missing Authorization via restore_records()
Medium
CVE-2024-24712
Heateor Social Login <= 1.1.30 - Authenticated(Contributor+) Stored Cross-Site Scripting via Shortcode
Medium
CVE-2023-6165
Restrict Usernames Emails Characters <= 3.1.3 - Authenticated(Administrator+) Stored Cross-Site Scripting
Medium
CVE-2024-0256
Starbox <= 3.4.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Profile Display Name and Social Settings
Medium
CVE-2024-1061
HTML5 Video Player <= 2.5.24 - Unauthenticated SQL Injection via id
Medium
CVE-2024-0797
Active Products Tables for WooCommerce. Professional products tables for WooCommerce store <= 1.0.6.1 - Missing Authorization
Medium
CVE-2024-23521
Happyforms <= 1.25.10 - Missing Authorization
Medium
CVE-2024-24567
Vyper's raw_call `value=` kwargs not disabled for static and delegate calls
High
CVE-2024-23838
TrueLayer.Client SSRF when fetching payment or payment provider
High
CVE-2024-23841
@apollo/experimental-nextjs-app-support Cross-site Scripting vulnerability
High
CVE-2024-24556
@urql/next Cross-site Scripting vulnerability
High
CVE-2024-24558
react-query-streamed-hydration Cross-site Scripting vulnerability
Medium
CVE-2024-24565
CrateDB database has an arbitrary file read vulnerability
Low
CVE-2024-21671
vantage6 vulnerable to username timing attack
Medium
CVE-2024-21653
vantage6 has insecure SSH configuration for node and server containers
High
CVE-2024-21649
vantage6 remote code execution vulnerability
Low
CVE-2024-22193
vantage6 may create unencrypted tasks in encrypted collaboration
High
CVE-2023-36260
Craft CMS Feed-Me
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.