High
CVE-2024-12534
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
High
CVE-2024-12537
Open WebUI Uncontrolled Resource Consumption vulnerability
High
CVE-2025-27415
Nuxt allows DOS via cache poisoning with payload rendering response
Medium
CVE-2025-30144
Fast-JWT Improperly Validates iss Claims
High
CVE-2025-29907
jsPDF Bypass Regular Expression Denial of Service (ReDoS)
Low
CVE-2025-1398
Mattermost Desktop App allows the bypass of Transparency, Consent, and Control (TCC) via code injection
Medium
CVE-2025-29771
JS Html Sanitizer allows XSS when used with contentEditable
Critical
CVE-2025-71338
Flowise allows arbitrary file write to RCE
Medium
CVE-2024-29409
nest allows a remote attacker to execute arbitrary code via the Content-Type header
High
CVE-2025-29776
In Azle, calling `setTimer` causes infinite loop of timers
Critical
CVE-2025-29775
xml-crypto Vulnerable to XML Signature Verification Bypass via DigestValue Comment
Critical
CVE-2025-29774
xml-crypto Vulnerable to XML Signature Verification Bypass via Multiple SignedInfo References
Critical
CVE-2025-71333
Flowise Pre-auth Arbitrary File Upload
High
CVE-2025-25975
Prototype Pollution Vulnerability in parse-git-config
Medium
CVE-2025-27789
Babel has inefficient RegExp complexity in generated code with .replace when transpiling named capturing groups
High
CVE-2025-59049
Mockoon has a Path Traversal and LFI in the static file serving endpoint
High
CVE-2025-25977
canvg Prototype Pollution vulnerability
High
CVE-2025-27597
Vue I18n Allows Prototype Pollution in `handleFlatJson`
High
CVE-2025-27152
axios Requests Vulnerable To Possible SSRF and Credential Leakage via Absolute URL
Medium
CVE-2025-27506
NocoDB Vulnerable to Reflected Cross-Site Scripting on Reset Password Page
High
CVE-2025-26319
FlowiseAI Flowise arbitrary file upload vulnerability
Medium
CVE-2025-27408
Manifest Uses a One-Way Hash without a Salt
Low
CVE-2024-53384
tsup DOM Clobbering vulnerability
Low
CVE-2024-51091
seajs Cross-site Scripting vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.