Medium
CVE-2024-37145
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,497
Reset filters
Medium
CVE-2024-36423
Flowise Cross-site Scripting in /api/v1/public-chatflows/id
Medium
CVE-2024-36422
Flowise Cross-site Scripting in api/v1/chatflows/id
High
CVE-2024-36421
Flowise Cors Misconfiguration in packages/server/src/index.ts
Critical
CVE-2023-49785
NextChat has full-read SSRF and XSS vulnerability in /api/cors endpoint
Medium
CVE-2023-47620
Scrypted Cross-site Scripting vulnerability
High
CVE-2024-42352
Nuxt Icon affected by a Server-Side Request Forgery (SSRF)
Critical
CVE-2024-34344
Nuxt vulnerable to remote code execution via the browser when running the test locally
High
CVE-2024-23657
Nuxt Devtools has a Path Traversal: '../filedir'
High
CVE-2024-39713
Rocket.Chat Server-Side Request Forgery (SSRF) vulnerability
Medium
CVE-2024-39919
@jmondi/url-to-png enables capture screenshot of localhost web services (unauthenticated pages)
High
CVE-2024-39693
Next.js Denial of Service (DoS) condition
High
CVE-2024-39698
electron-updater Code Signing Bypass on Windows
High
CVE-2024-39895
Directus GraphQL Field Duplication Denial of Service (DoS)
Medium
CVE-2024-39699
Directus Blind SSRF On File Import
Medium
CVE-2024-39687
Server Side Request Forgery (SSRF) attack in Fedify
Medium
CVE-2024-39691
Malicious Matrix homeserver can leak truncated message content of messages it shouldn't have access to
High
CVE-2024-39943
rejetto HFS vulnerable to OS Command Execution by remote authenticated users
Critical
CVE-2024-39309
ZDI-CAN-23894: Parse Server literalizeRegexPart SQL Injection Authentication Bypass Vulnerability
High
CVE-2024-37818
Strapi Server-Side Request Forgery (SSRF)
Medium
CVE-2024-38355
socket.io has an unhandled 'error' event
Medium
CVE-2024-37895
Lobe Chat API Key Leak
High
CVE-2024-37890
ws affected by a DoS when handling a request with many HTTP headers
High
CVE-2024-34065
@strapi/plugin-users-permissions leaks 3rd party authentication tokens and authentication bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.