Medium
CVE-2024-56510
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
High
CVE-2024-56334
Systeminformation has command injection vulnerability in getWindowsIEEE8021x (SSID)
Medium
CVE-2024-56331
uptime-kuma vulnerable to Local File Inclusion (LFI) via Improper URL Handling in `Real-Browser` monitor
High
CVE-2024-56159
Astro's server source code is exposed to the public if sourcemaps are enabled
Low
ghsa-m56h-5xx3-2jc2
Prototype pollution in jsii.configureCategories
Medium
CVE-2024-56140
Atro CSRF Middleware Bypass (security.checkOrigin)
Medium
CVE-2024-21548
Bun has an Application-level Prototype Pollution vulnerability in the runtime native API for Glo
High
CVE-2024-51479
Next.js authorization bypass vulnerability
Medium
CVE-2024-53866
pnpm no-script global cache poisoning via overrides / `ignore-scripts` evasion
High
CVE-2024-55500
Avenwu Whistle Cross-Site Request Forgery (CSRF)
Critical
CVE-2024-54152
Angular Expressions - Remote Code Execution when using locals
High
CVE-2024-53441
Bit flip attack vulnerability in cookie-encrypter
High
CVE-2024-54151
Directus allows unauthenticated access to WebSocket events and operations
Medium
CVE-2024-53847
Trix editor subject to XSS vulnerabilities on copy & paste
Medium
CVE-2024-55565
Predictable results in nanoid generation when given non-integer values
High
CVE-2024-52798
path-to-regexp contains a ReDoS
Medium
CVE-2024-54128
Directus has an HTML Injection in Comment
Low
CVE-2024-51210
Firepad allows insecure document access
High
CVE-2024-54134
Modified package published to npm, containing malware that exfiltrates private key material
Medium
CVE-2024-53983
Backstage Scaffolder plugin vulnerable to Server-Side Request Forgery
High
CVE-2024-53900
Mongoose search injection vulnerability
Critical
ghsa-q849-wxrc-vqrp
hull.js Code Injection Vulnerability
Medium
CVE-2024-52810
@intlify/shared Prototype Pollution vulnerability
Medium
CVE-2024-52809
vue-i18n has cross-site scripting vulnerability with prototype pollution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.