High
CVE-2024-58339
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
High
CVE-2024-14021
LlamaIndex (run-llama/llama_index) versions up to and including 0.11.6 contain an unsafe deserialization vulnerability in BGEM3Index.load_from_disk() in llama_index/indices/managed/bge_m3/base.py. The
High
CVE-2024-58340
LangChain versions up to and including 0.3.1 contain a regular expression denial-of-service (ReDoS) vulnerability in the MRKLOutputParser.parse() method (libs/langchain/langchain/agents/mrkl/output_pa
High
CVE-2025-68472
MindsDB has improper sanitation of filepath that leads to information disclosure and DOS
Medium
CVE-2026-24612
Orchid Store <= 1.5.15 - Missing Authorization
Medium
CVE-2026-24614
Flex QR Code Generator <= 1.2.11 - Authenticated (Author+) Stored Cross-Site Scripting
High
CVE-2025-69005
Search & Go <= 2.8 - Unauthenticated Local File Inclusion
Medium
CVE-2025-68904
JNews - Frontend Submit <= 11.0.0 - Reflected Cross-Site Scripting
High
CVE-2026-27052
Sales Countdown Timer for WooCommerce and WordPress <= 1.1.8.1 - Authenticated (Contributor+) Local File Inclusion
High
CVE-2025-68908
Barberry <= 2.9.9.87 - Unauthenticated Local File Inclusion
High
CVE-2025-50007
xSmart <= 1.2.9.4 - Authenticated (Subscriber+) Privilege Escalation
Medium
CVE-2025-49249
Drone <= 1.40 - Reflected Cross-Site Scripting
Medium
CVE-2025-69363
Responsive Addons for Elementor <= 2.0.8 - Missing Authorization
Medium
CVE-2025-67614
TheNa <= 1.5.5 - Reflected Cross-Site Scripting
Medium
CVE-2025-69362
UiChemy <= 4.4.2 - Authenticated (Author+) Stored Cross-Site Scripting
Medium
CVE-2025-49050
Lead Capturing Pages <= 2.5 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2026-24613
Ecwid Shopping Cart <= 7.0.6 - Missing Authorization
Medium
CVE-2025-49046
xPromoter <= 1.3.4 - Reflected Cross-Site Scripting
Medium
CVE-2025-50006
xSmart <= 1.2.9.4 - Reflected Cross-Site Scripting
High
CVE-2026-22331
AutoParts <= 1.5.8 - Unauthenticated Local File Inclusion
Medium
CVE-2025-49049
DZS Video Gallery <= 12.39 - Authenticated (Subscriber+) SQL Injection
Medium
CVE-2025-5805
Electron <= 1.8.2 - Missing Authorization
High
CVE-2026-22325
Promo <= 1.3.0 - Unauthenticated Local File Inclusion
Medium
CVE-2026-24610
MetForm Pro <= 3.9.8 - Missing Authorization
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.