Medium
CVE-2024-32472
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 5,032
Reset filters
High
CVE-2024-30253
Handling untrusted input can result in a crash, leading to loss of availability / denial of service
Critical
CVE-2024-28056
AWS Amplify CLI has incorrect trust policy management
Medium
ghsa-x565-32qp-m3vf
phin may include sensitive headers in subsequent requests after redirect
Medium
CVE-2024-32000
Matrix IRC Bridge truncated content of messages can be leaked
Medium
CVE-2024-31995
zcap has incomplete expiration checks in capability chains.
High
CVE-2024-31999
@fastify/secure-session: Reuse of destroyed secure session cookie
Medium
CVE-2021-4438
React Native Sms User Consent Intent Redirection Vulnerability
Medium
CVE-2024-31454
PsiTransfer: File integrity violation
Medium
CVE-2024-31453
PsiTransfer: Violation of the integrity of file distribution
High
CVE-2024-22363
SheetJS Regular Expression Denial of Service (ReDoS)
Critical
CVE-2024-27448
MailDev Remote Code Execution
High
CVE-2024-31206
dectalk-tts Uses Unencrypted HTTP Request
Medium
CVE-2024-31207
Vite's `server.fs.deny` did not deny requests for patterns with directories.
High
CVE-2024-29900
@electron/packager's build process memory potentially leaked into final executable
High
CVE-2024-29896
Content-Security-Policy header generation in middleware could be compromised by malicious injections
High
CVE-2024-25354
domain-suffix RegEx Denial of Service
Medium
CVE-2024-29203
TinyMCE Cross-Site Scripting (XSS) vulnerability in handling iframes
Medium
CVE-2024-29881
TinyMCE Cross-Site Scripting (XSS) vulnerability in handling external SVG files through Object or Embed elements
Medium
CVE-2024-29041
Express.js Open Redirect in malformed URLs
Medium
CVE-2024-28246
KaTeX missing normalization of the protocol in URLs allows bypassing forbidden protocols
Medium
CVE-2024-28245
KaTeX's `\includegraphics` does not escape filename
Medium
CVE-2024-28244
KaTeX's maxExpand bypassed by Unicode sub/superscripts
Medium
CVE-2024-28243
KaTeX's maxExpand bypassed by `\edef`
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.