Crítica
CVE-2024-57077
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 920
Restablecer filtros
Alta
CVE-2024-57085
@stryker-mutator/util vulnerable to Prototype Pollution
Alta
CVE-2024-57086
node-opcua-alarm-condition prototype pollution vulnerability
Alta
CVE-2024-57075
eazy-logger prototype pollution
Alta
CVE-2024-57079
@zag-js/core prototype pollution
Alta
CVE-2024-57082
@rpldy/uploader prototype pollution
Alta
CVE-2024-57080
vxe-table prototype pollution
Alta
CVE-2024-57068
@tanstack/form-core prototype pollution
Alta
CVE-2024-57072
module-from-string prototype pollution
Alta
CVE-2024-57066
@ndhoule/defaults prototype pollution
Baja
CVE-2024-6533
Directus has a DOM-Based cross-site scripting (XSS) via layout_options
Media
CVE-2025-24010
Websites were able to send any requests to the development server and read the response in vite
Crítica
CVE-2024-56198
path-sanitizer allows bypassing the existing filters to achieve path-traversal vulnerability
Alta
CVE-2024-56334
Systeminformation has command injection vulnerability in getWindowsIEEE8021x (SSID)
Crítica
CVE-2024-54152
Angular Expressions - Remote Code Execution when using locals
Media
CVE-2024-52810
@intlify/shared Prototype Pollution vulnerability
Alta
CVE-2024-49362
Remote Code Execution on click of <a> Link in markdown preview
Media
CVE-2024-42515
Glossarizer Cross-site Scripting vulnerability
Crítica
CVE-2024-48914
Vendure asset server plugin has local file read vulnerability with AssetServerPlugin & LocalAssetStorageStrategy
Crítica
CVE-2024-21534
JSONPath Plus Remote Code Execution (RCE) Vulnerability
Media
ghsa-pf56-h9qf-rxq4
Saltcorn Server Stored Cross-Site Scripting (XSS) in event logs page
Alta
ghsa-78p3-fwcq-62c2
@saltcorn/server Remote Code Execution (RCE) / SQL injection via prototype pollution by manipulating `lang` and `defstring` parameters when setting localizer strings
Media
CVE-2024-45607
whatsapp-api-js fails to validate message's signature
Alta
CVE-2024-45590
body-parser vulnerable to denial of service when url encoding is enabled
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.