Medium
CVE-2024-26318
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 5,032
Reset filters
High
ghsa-w4hv-vmv9-hgcr
GitHub Security Lab (GHSL) Vulnerability Report, scrypted: `GHSL-2023-218`, `GHSL-2023-219`
Medium
CVE-2024-23724
Ghost has possible Cross-site Scripting issue
Medium
CVE-2024-24828
Pkg Local Privilege Escalation
Low
CVE-2023-42282
NPM IP package incorrectly identifies some private IP addresses as public
Medium
CVE-2023-4771
CKEditor cross-site scripting vulnerability in AJAX sample
Medium
CVE-2024-24816
CKEditor4 Cross-site Scripting vulnerability in samples with enabled the preview feature
Medium
CVE-2024-24815
CKEditor4 Cross-site Scripting vulnerability caused by incorrect CDATA detection
High
CVE-2021-4435
Yarn untrusted search path vulnerability
Medium
ghsa-mf74-qq7w-6j7v
Zmarkdown Server-Side Request Forgery (SSRF) in remark-download-images
Medium
CVE-2024-58379
nodemailer ReDoS when trying to send a specially crafted email
Medium
CVE-2024-24566
@lobehub/chat vulnerable to unauthorized access to plugins
High
CVE-2024-23641
Sending a GET or HEAD request with a body crashes SvelteKit
Medium
CVE-2024-23340
@hono/node-server cannot handle "double dots" in URL
High
ghsa-wg2x-rv86-mmpx
SPV Merkle proof malleability allows the maintainer to prove invalid transactions
High
CVE-2024-23331
Vite dev server option `server.fs.deny` can be bypassed when hosted on case-insensitive filesystem
High
CVE-2023-46942
EverShop vulnerable to improper authorization in GraphQL endpoints
Medium
CVE-2024-21668
react-native-mmkv Insertion of Sensitive Information into Log File vulnerability
Medium
CVE-2023-51701
@fastify/reply-from JSON Content-Type parsing confusion
High
CVE-2023-6944
@backstage/backend-app-api leaks GitLab access tokens
Medium
CVE-2023-50550
Layui cross-site scripting (XSS) vulnerability
High
CVE-2023-52079
msgpackr's conversion of property names to strings can trigger infinite recursion
Medium
CVE-2023-50481
blinksocks has weak encryption algorithms
Critical
CVE-2023-50475
bsock uses weak hashing algorithms
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.