Medium
CVE-2024-45047
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 5,032
Reset filters
Medium
CVE-2024-6534
Directus has an insecure object reference via PATH presets
Medium
CVE-2024-45037
AWS CDK RestApi not generating authorizationScope correctly in resultant CFN template
Medium
CVE-2024-43788
Webpack's AutoPublicPathRuntimeModule has a DOM Clobbering Gadget that leads to XSS
High
CVE-2024-43414
Apollo Query Planner and Apollo Gateway may infinitely loop on sufficiently complex queries
Low
CVE-2024-43787
Hono CSRF middleware can be bypassed using crafted Content-Type header
High
CVE-2024-40453
squirrelly Code Injection vulnerability
Medium
CVE-2024-43411
CKEditor4 low-risk cross-site scripting (XSS) vulnerability linked to potential domain takeover
Medium
CVE-2024-43407
Code Snippet GeSHi plugin in CKEditor 4 has reflected cross-site scripting (XSS) vulnerability
Medium
CVE-2024-43409
Ghost's improper authentication allows access to member information and actions
Medium
CVE-2024-42369
matrix-js-sdk will freeze when a user sets a room with itself as a its predecessor
Medium
CVE-2024-43373
webcrack has an Arbitrary File Write Vulnerability on Windows when Parsing and Saving a Malicious Bundle
Critical
CVE-2024-38989
Prototype pollution in izatop bunt
Medium
CVE-2024-41677
Qwik has a potential mXSS vulnerability due to improper HTML escaping
Medium
CVE-2024-42347
Matrix SDK for React's URL preview setting for a room is controllable by the homeserver
Medium
CVE-2024-37146
Flowise Cross-site Scripting in/api/v1/credentials/id
Medium
CVE-2024-37145
Flowise Cross-site Scripting in /api/v1/chatflows-streaming/id
Medium
CVE-2024-36423
Flowise Cross-site Scripting in /api/v1/public-chatflows/id
Medium
CVE-2024-36422
Flowise Cross-site Scripting in api/v1/chatflows/id
High
CVE-2024-36421
Flowise Cors Misconfiguration in packages/server/src/index.ts
High
CVE-2024-36420
Flowise Path Injection at /api/v1/openai-assistants-file
Critical
CVE-2023-49785
NextChat has full-read SSRF and XSS vulnerability in /api/cors endpoint
Medium
CVE-2023-47623
Scrypted Cross-site Scripting vulnerability
Medium
CVE-2023-47620
Scrypted Cross-site Scripting vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.