High
CVE-2024-42352
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 5,032
Reset filters
Critical
CVE-2024-34344
Nuxt vulnerable to remote code execution via the browser when running the test locally
Medium
CVE-2024-34343
nuxt vulnerable to Cross-site Scripting in navigateTo if used after SSR
High
CVE-2024-23657
Nuxt Devtools has a Path Traversal: '../filedir'
Medium
CVE-2024-41962
Bostr Improper Authorization vulnerability
Low
CVE-2024-41945
The fuels-ts typescript SDK has no awareness of to-be-spent transactions
High
CVE-2024-41818
fast-xml-parser vulnerable to ReDOS at currency parsing
Medium
CVE-2024-6783
vue-template-compiler vulnerable to client-side Cross-Site Scripting (XSS)
High
CVE-2024-41655
(ReDoS) Regular Expression Denial of Service in tf2-item-format
Medium
CVE-2024-6833
Zowe CLI allows storage of previously entered secure credentials in a plaintext file
Medium
CVE-2024-39919
@jmondi/url-to-png enables capture screenshot of localhost web services (unauthenticated pages)
Medium
CVE-2024-39918
@jmondi/url-to-png contains a Path Traversal vulnerability
High
CVE-2024-39693
Next.js Denial of Service (DoS) condition
High
CVE-2024-21525
node-twain vulnerable to Improper Check or Handling of Exceptional Conditions
High
CVE-2024-21523
images vulnerable to Denial of Service
High
CVE-2024-39698
electron-updater Code Signing Bypass on Windows
High
CVE-2024-39896
Directus Allows Single Sign-On User Enumeration
High
CVE-2024-39895
Directus GraphQL Field Duplication Denial of Service (DoS)
High
CVE-2024-39701
Directus incorrectly handles `_in` filter
Medium
CVE-2024-39699
Directus Blind SSRF On File Import
Medium
CVE-2024-39687
Server Side Request Forgery (SSRF) attack in Fedify
Medium
CVE-2024-39691
Malicious Matrix homeserver can leak truncated message content of messages it shouldn't have access to
Medium
CVE-2024-39018
@cat5th/key-serializer Prototype Pollution vulnerability
High
CVE-2024-39008
robinweser fast-loops vulnerable to prototype pollution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.