Medium
CVE-2024-53388
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
Medium
CVE-2024-53382
PrismJS DOM Clobbering vulnerability
Medium
CVE-2024-53386
Stage.js DOM Clobbering vulnerabilty
High
CVE-2025-1756
mongosh vulnerable to local privilege escalation
High
CVE-2025-1691
MongoDB Shell may be susceptible to Control Character Injection via autocomplete
Low
CVE-2025-1693
MongoDB Shell may be susceptible to control character Injection via shell output
Medium
CVE-2025-1692
MongoDB Shell may be susceptible to control character injection via pasting
Low
CVE-2025-27146
Matrix IRC Bridge allows IRC command injection to own puppeted user
High
CVE-2025-27108
DOM Expressions has a Cross-Site Scripting (XSS) vulnerability due to improper use of string.replace
High
CVE-2025-27109
Solid Lacks Escaping of HTML in JSX Fragments allows for Cross-Site Scripting (XSS)
High
CVE-2025-71403
Better Auth allows bypassing the trustedOrigins Protection which leads to ATO
Medium
CVE-2025-27143
Beter Auth has an Open Redirect via Scheme-Less Callback Parameter
Low
CVE-2025-1467
tarteaucitron Cross-site Scripting (XSS)
Medium
CVE-2025-25299
Cross-site scripting (XSS) in the CKEditor 5 real-time collaboration package
Critical
CVE-2025-0868
DocsGPT Allows Remote Code Execution
Medium
CVE-2025-27089
Directus allows updates to non-allowed fields due to overlapping policies
High
CVE-2025-1302
JSONPath Plus allows Remote Code Execution
Medium
CVE-2025-25290
@octokit/request has a Regular Expression in fetchWrapper that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking
Medium
CVE-2025-25289
@octokit/request-error has a Regular Expression in index that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking
Medium
CVE-2025-25288
@octokit/plugin-paginate-rest has a Regular Expression in iterator Leads to ReDoS Vulnerability Due to Catastrophic Backtracking
Medium
CVE-2025-25285
@octokit/endpoint has a Regular Expression in parse that Leads to ReDoS Vulnerability Due to Catastrophic Backtracking
Medium
CVE-2025-25304
Vega allows Cross-site Scripting via the vlSelectionTuples function
Medium
CVE-2025-26791
DOMPurify allows Cross-site Scripting (XSS)
Critical
ghsa-vjh7-7g9h-fjfh
Elliptic's private key extraction in ECDSA upon signing a malformed input (e.g. a string)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.