High
CVE-2024-45296
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 764
Reset filters
High
CVE-2024-42471
@actions/artifact has an Arbitrary File Write via artifact extraction
Medium
CVE-2020-36830
ReDoS in urlregex
Medium
CVE-2024-45037
AWS CDK RestApi not generating authorizationScope correctly in resultant CFN template
High
ghsa-6jrj-vc65-c983
unzip-stream allows Arbitrary File Write via artifact extraction
Low
CVE-2024-41945
The fuels-ts typescript SDK has no awareness of to-be-spent transactions
Medium
CVE-2024-39918
@jmondi/url-to-png contains a Path Traversal vulnerability
Medium
CVE-2024-39691
Malicious Matrix homeserver can leak truncated message content of messages it shouldn't have access to
Medium
CVE-2024-38356
TinyMCE Cross-Site Scripting (XSS) vulnerability using noneditable_regexp option
Medium
CVE-2024-38357
TinyMCE Cross-Site Scripting (XSS) vulnerability using noscript elements
Medium
CVE-2024-36361
Pug allows JavaScript code execution if an application accepts untrusted input
Medium
CVE-2024-4067
Regular Expression Denial of Service (ReDoS) in micromatch
Medium
CVE-2024-34708
Directus allows redacted data extraction on the API through "alias"
Critical
CVE-2024-32962
xml-crypto vulnerable to XML signature verification bypass due improper verification of signature/signature spoofing
High
CVE-2024-25354
domain-suffix RegEx Denial of Service
Medium
CVE-2024-28246
KaTeX missing normalization of the protocol in URLs allows bypassing forbidden protocols
Medium
CVE-2024-28863
Denial of service while parsing a tar file due to lack of folders count validation
Medium
CVE-2024-27094
OpenZeppelin Contracts base64 encoding may read from potentially dirty memory
High
ghsa-w4hv-vmv9-hgcr
GitHub Security Lab (GHSL) Vulnerability Report, scrypted: `GHSL-2023-218`, `GHSL-2023-219`
High
CVE-2024-21490
angular vulnerable to super-linear runtime due to backtracking
Medium
CVE-2024-58379
nodemailer ReDoS when trying to send a specially crafted email
High
CVE-2024-23641
Sending a GET or HEAD request with a body crashes SvelteKit
High
CVE-2023-50249
Sentry's Astro SDK vulnerable to ReDoS
Medium
CVE-2023-49804
Password Change Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.