Critical
CVE-2024-34344
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
Medium
CVE-2024-34343
nuxt vulnerable to Cross-site Scripting in navigateTo if used after SSR
High
CVE-2024-23657
Nuxt Devtools has a Path Traversal: '../filedir'
High
CVE-2024-39713
Rocket.Chat Server-Side Request Forgery (SSRF) vulnerability
Low
CVE-2024-42461
Elliptic allows BER-encoded signatures
Low
CVE-2024-42460
Elliptic's ECDSA missing check for whether leading bit of r and s is zero
Low
CVE-2024-42459
Elliptic's EDDSA missing signature length check
Medium
CVE-2024-41962
Bostr Improper Authorization vulnerability
High
CVE-2024-38986
@75lb/deep-merge Prototype Pollution vulnerability
Low
CVE-2024-41945
The fuels-ts typescript SDK has no awareness of to-be-spent transactions
High
CVE-2024-41818
fast-xml-parser vulnerable to ReDOS at currency parsing
Medium
CVE-2024-6783
vue-template-compiler vulnerable to client-side Cross-Site Scripting (XSS)
High
CVE-2024-41655
(ReDoS) Regular Expression Denial of Service in tf2-item-format
Medium
CVE-2024-6833
Zowe CLI allows storage of previously entered secure credentials in a plaintext file
High
CVE-2024-40631
Plate media plugins has a XSS in media embed element when using custom URL parsers
Medium
CVE-2024-39919
@jmondi/url-to-png enables capture screenshot of localhost web services (unauthenticated pages)
Medium
CVE-2024-39918
@jmondi/url-to-png contains a Path Traversal vulnerability
Medium
CVE-2024-6485
Bootstrap Cross-Site Scripting (XSS) vulnerability for data-* attributes
High
CVE-2024-39693
Next.js Denial of Service (DoS) condition
High
CVE-2024-21526
speaker vulnerable to Denial of Service
High
CVE-2024-21525
node-twain vulnerable to Improper Check or Handling of Exceptional Conditions
High
CVE-2024-21523
images vulnerable to Denial of Service
High
CVE-2024-21524
node-stringbuilder vulnerable to Out-of-bounds Read
High
CVE-2024-21521
@discordjs/opus vulnerable to Denial of Service
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.