Crítica
CVE-2024-37273
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.523
Restablecer filtros
Crítica
CVE-2024-36858
Jan path traversal vulnerability
Alta
CVE-2024-36857
Jan path traversal vulnerability
Alta
CVE-2024-36128
Directus is soft-locked by providing a string value to random string util
Alta
CVE-2024-36120
javascript-deobfuscator crafted payload can lead to code execution
Alta
CVE-2024-29415
ip SSRF improper categorization in isPublic
Media
CVE-2022-25037
wangEditor was discovered to contain a cross-site scripting (XSS) vulnerability via the image upload function
Alta
CVE-2024-21512
mysql2 vulnerable to Prototype Pollution
Baja
CVE-2023-1001
vxe-table Cross-site Scripting vulnerability
Media
CVE-2024-36361
Pug allows JavaScript code execution if an application accepts untrusted input
Alta
CVE-2024-34448
Ghost allows CSV Injection during member CSV export
Alta
CVE-2024-35220
@fastify/session reuses destroyed session cookie
Alta
CVE-2024-24293
MiguelCastillo @bit/loader Prototype Pollution issue
Alta
CVE-2024-29651
json-schema-ref-parser Prototype Pollution issue
Crítica
CVE-2024-24294
Blackprint @blackprint/engine Prototype Pollution issue
Alta
CVE-2024-34273
njwt Prototype Pollution vulnerability
Media
CVE-2024-34712
Oceanic allows unsanitized user input to lead to path traversal in URLs
Media
CVE-2024-34243
Konga is vulnerable to Cross Site Scripting (XSS) attacks
Media
CVE-2024-4067
Regular Expression Denial of Service (ReDoS) in micromatch
Alta
CVE-2024-4068
Uncontrolled resource consumption in braces
Media
CVE-2024-34709
Directus Lacks Session Tokens Invalidation
Alta
CVE-2023-49781
NocoDB Vulnerable to Stored Cross-Site Scripting in Formula.vue
Media
CVE-2024-34708
Directus allows redacted data extraction on the API through "alias"
Media
CVE-2023-50718
NocoDB SQL Injection vulnerability
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.