Low
CVE-2024-23903
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
High
CVE-2024-23905
Content-Security-Policy disabled by Red Hat Dependency Analytics Jenkins Plugin
Unrated
CVE-2024-13242
drupal/swiftmailer - SA-CONTRIB-2024-006
Unrated
CVE-2024-13239
drupal/tfa - SA-CONTRIB-2024-003
Medium
CVE-2023-51702
Apache Airflow CNCF Kubernetes provider, Apache Airflow: Kubernetes configuration file saved without encryption in the Metadata and logged as plain text in the Triggerer service
High
CVE-2023-50943
Apache Airflow, versions before 2.8.1, have a vulnerability that allows a potential attacker to poison the XCom data by bypassing the protection of "enable_xcom_pickling=False" configuration setting r
High
CVE-2023-50944
Apache Airflow, versions before 2.8.1, have a vulnerability that allows an authenticated user to access the source code of a DAG to which they don't have access. This vulnerability is considered low s
High
CVE-2024-23641
Sending a GET or HEAD request with a body crashes SvelteKit
Medium
CVE-2024-23633
Cross-site Scripting Vulnerability on Data Import
Medium
CVE-2024-0688
WebSub (FKA. PubSubHubbub) <= 3.1.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Medium
CVE-2024-0373
Views for WPForms <= 3.2.2 - Cross-Site Request Forgery via save_view
Medium
CVE-2024-0668
Advanced Database Cleaner <= 3.1.3 - Authenticated(Administrator+) PHP Object Injection via process_bulk_action
Medium
CVE-2024-0624
Paid Memberships Pro <= 2.12.7 - Cross-Site Request Forgery to Level Orders Update
Medium
CVE-2024-0371
Views for WPForms <= 3.2.2 - Missing Authorization via create_view
Medium
CVE-2024-23506
InstaWP Connect <= 0.1.0.9 - Missing Authorization to Sensitive Information Dislcosure
Medium
CVE-2024-0617
Category Discount Woocommerce <= 4.11 - Cross-Site Request Forgery via wpcd_save_discount()
High
CVE-2023-6933
Better Search Replace <= 1.4.4 - Unauthenticated PHP Object Injection
High
CVE-2024-23507
InstaWP Connect <= 0.1.0.9 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2024-0370
Views for WPForms <= 3.2.2 - Missing Authorization via save_view
Medium
CVE-2024-0374
Views for WPForms <= 3.2.2 - Cross-Site Request Forgery via create_view
Medium
CVE-2024-23508
PDF Poster - PDF Embedder Plugin for WordPress <= 2.1.17 - Reflected Cross-Site Scripting
Medium
CVE-2024-0372
Views for WPForms <= 3.2.2 - Missing Authorization via get_form_fields
High
CVE-2023-6846
File Manager Pro <= 8.3.4 - Authenticated (Subscriber+) Arbitrary File Upload
Medium
CVE-2024-0625
WPFront Notification Bar <= 3.3.2 - Authenticated (Admin+) Stored Cross-Site Scripting via wpfront-notification-bar-options[custom_class]
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.