Medium
CVE-2020-26311
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
Medium
CVE-2020-26303
insane vulnerable to Regular Expression Denial of Service
Medium
CVE-2020-26304
Foundation Regular Expression Denial of Service vulnerability
Medium
CVE-2020-26305
CommonRegexJS Regular Expression Denial of Service vulnerability
Medium
CVE-2020-26309
nope-validator Regular Expression Denial of Service vulnerability
Medium
CVE-2020-26308
validate.js Regular Expression Denial of Service vulnerability
Medium
CVE-2020-26306
Knwl.js Regular Expression Denial of Service vulnerability
High
CVE-2024-48964
OS Command Injection in Snyk gradle plugin
High
CVE-2024-48963
OS Command Injection in Snyk php plugin
High
ghsa-m4gq-x24j-jpmf
Prototype pollution vulnerability found in Mermaid's bundled version of DOMPurify
Medium
CVE-2024-47819
Umbraco CMS vulnerable to stored Cross-site Scripting in the "dictionary name" on Dictionary section
High
CVE-2024-48930
secp256k1-node allows private key extraction over ECDH
High
CVE-2024-21536
Denial of service in http-proxy-middleware
Low
CVE-2024-9506
ReDoS vulnerability in vue package that is exploitable through inefficient regex evaluation in the parseHTML function
High
CVE-2024-47824
Malicious homeservers can steal message keys when the matrix-react-sdk user invites another user to a room
High
CVE-2024-47080
Matrix JavaScript SDK's key history sharing could share keys to malicious devices
Critical
CVE-2024-48914
Vendure asset server plugin has local file read vulnerability with AssetServerPlugin & LocalAssetStorageStrategy
Medium
CVE-2024-48913
Hono allows bypass of CSRF Middleware by a request without Content-Type header.
Low
CVE-2024-48948
Valid ECDSA signatures erroneously rejected in Elliptic
Medium
CVE-2024-21535
Cross site scripting in markdown-to-jsx
Medium
CVE-2024-47885
DOM Clobbering Gadget found in astro's client-side router that leads to XSS
Medium
CVE-2024-47831
Denial of Service condition in Next.js image optimization
Critical
CVE-2024-42640
angular-base64-upload vulnerable to unauthenticated remote code execution
High
CVE-2024-47875
DOMpurify has a nesting-based mXSS
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.