Critical
CVE-2024-37273
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
Critical
CVE-2024-36858
Jan path traversal vulnerability
High
CVE-2024-36857
Jan path traversal vulnerability
High
CVE-2024-36128
Directus is soft-locked by providing a string value to random string util
High
CVE-2024-36120
javascript-deobfuscator crafted payload can lead to code execution
High
CVE-2024-29415
ip SSRF improper categorization in isPublic
Medium
CVE-2022-25037
wangEditor was discovered to contain a cross-site scripting (XSS) vulnerability via the image upload function
High
CVE-2024-21512
mysql2 vulnerable to Prototype Pollution
Low
CVE-2023-1001
vxe-table Cross-site Scripting vulnerability
Medium
CVE-2024-36361
Pug allows JavaScript code execution if an application accepts untrusted input
High
CVE-2024-34448
Ghost allows CSV Injection during member CSV export
High
CVE-2024-35220
@fastify/session reuses destroyed session cookie
High
CVE-2024-24293
MiguelCastillo @bit/loader Prototype Pollution issue
High
CVE-2024-29651
json-schema-ref-parser Prototype Pollution issue
Critical
CVE-2024-24294
Blackprint @blackprint/engine Prototype Pollution issue
High
CVE-2024-34273
njwt Prototype Pollution vulnerability
Medium
CVE-2024-34712
Oceanic allows unsanitized user input to lead to path traversal in URLs
Medium
CVE-2024-34243
Konga is vulnerable to Cross Site Scripting (XSS) attacks
Medium
CVE-2024-4067
Regular Expression Denial of Service (ReDoS) in micromatch
High
CVE-2024-4068
Uncontrolled resource consumption in braces
Medium
CVE-2024-34709
Directus Lacks Session Tokens Invalidation
High
CVE-2023-49781
NocoDB Vulnerable to Stored Cross-Site Scripting in Formula.vue
Medium
CVE-2024-34708
Directus allows redacted data extraction on the API through "alias"
Medium
CVE-2023-50718
NocoDB SQL Injection vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.