High
CVE-2024-32866
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
Medium
CVE-2024-58376
Renovate vulnerable to arbitrary command injection via helmv3 manager and registryAliases
Medium
CVE-2024-32869
Hono vulnerable to Restricted Directory Traversal in serveStatic with deno
Critical
CVE-2024-21511
MySQL2 for Node Arbitrary Code Injection
High
CVE-2024-34347
@hoppscotch/cli affected by Sandbox Escape in @hoppscotch/js-sandbox leads to RCE
High
CVE-2024-32652
@hono/node-server has Denial of Service risk when receiving Host header that cannot be parsed
Low
ghsa-23q2-5gf8-gjpp
Enabling Authentication does not close all logged in socket connections immediately
Critical
CVE-2024-30564
@andrei-tatar/nora-firebase-common Prototype Pollution vulnerability
Low
ghsa-82jv-9wjw-pqh6
Prototype pollution in emit function
Medium
CVE-2024-32472
Stored Cross-site Scripting (XSS) in excalidraw's web embed component
High
CVE-2024-30253
Handling untrusted input can result in a crash, leading to loss of availability / denial of service
Critical
CVE-2024-28056
AWS Amplify CLI has incorrect trust policy management
Medium
ghsa-x565-32qp-m3vf
phin may include sensitive headers in subsequent requests after redirect
Medium
CVE-2024-32000
Matrix IRC Bridge truncated content of messages can be leaked
Critical
CVE-2024-21508
mysql2 Remote Code Execution (RCE) via the readCodeFor function
Medium
CVE-2024-29504
Summernote vulnerable to cross-site scripting
Medium
CVE-2024-31995
zcap has incomplete expiration checks in capability chains.
High
CVE-2024-31999
@fastify/secure-session: Reuse of destroyed secure session cookie
Medium
CVE-2024-21507
mysql2 cache poisoning vulnerability
Medium
CVE-2024-21509
mysql2 vulnerable to Prototype Poisoning
Medium
CVE-2021-4438
React Native Sms User Consent Intent Redirection Vulnerability
Medium
CVE-2024-31454
PsiTransfer: File integrity violation
Medium
CVE-2024-31453
PsiTransfer: Violation of the integrity of file distribution
High
CVE-2024-22363
SheetJS Regular Expression Denial of Service (ReDoS)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.