Medium
CVE-2024-45607
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
High
CVE-2024-21529
dset Prototype Pollution vulnerability
High
CVE-2024-45596
Session is cached for OpenID and OAuth2 if `redirect` is not used
Low
CVE-2024-43799
send vulnerable to template injection that can lead to XSS
Low
CVE-2024-43800
serve-static vulnerable to template injection that can lead to XSS
Low
CVE-2024-43796
express vulnerable to XSS via response.redirect()
High
CVE-2024-45590
body-parser vulnerable to denial of service when url encoding is enabled
High
CVE-2024-21528
node-gettext vulnerable to Prototype Pollution
High
CVE-2024-45296
path-to-regexp vulnerable to Regular Expression Denial of Service via multiple route parameters
Low
CVE-2024-8373
AngularJS allows attackers to bypass common image source restrictions
Low
CVE-2024-8372
AngularJS allows attackers to bypass common image source restrictions
High
CVE-2024-42471
@actions/artifact has an Arbitrary File Write via artifact extraction
Medium
CVE-2024-45390
@blakeembrey/template vulnerable to code injection when attacker controls template input
High
CVE-2024-45391
Tina search token leak via lock file in TinaCMS
Medium
CVE-2024-45389
DOM clobbering could escalate to Cross-site Scripting (XSS)
Medium
CVE-2020-36830
ReDoS in urlregex
Medium
CVE-2024-45047
Svelte has a potential mXSS vulnerability due to improper HTML escaping
Medium
CVE-2024-6534
Directus has an insecure object reference via PATH presets
Medium
CVE-2024-45037
AWS CDK RestApi not generating authorizationScope correctly in resultant CFN template
Medium
CVE-2024-43788
Webpack's AutoPublicPathRuntimeModule has a DOM Clobbering Gadget that leads to XSS
High
CVE-2024-43414
Apollo Query Planner and Apollo Gateway may infinitely loop on sufficiently complex queries
High
CVE-2024-8182
Flowise Unauthenticated Denial of Service (DoS) vulnerability
High
CVE-2024-8181
Flowise Authentication Bypass vulnerability
High
ghsa-6jrj-vc65-c983
unzip-stream allows Arbitrary File Write via artifact extraction
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.