High
CVE-2024-47061
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,614
Reset filters
Medium
ghsa-84jw-g43v-8gjm
DOM Clobbering Gadget found in Rspack's AutoPublicPathRuntimeModule that leads to XSS
Medium
CVE-2024-45812
Vite DOM Clobbering gadget found in vite bundled scripts that leads to XSS
Medium
CVE-2024-6534
Directus has an insecure object reference via PATH presets
Medium
CVE-2024-43788
Webpack's AutoPublicPathRuntimeModule has a DOM Clobbering Gadget that leads to XSS
Medium
CVE-2024-43373
webcrack has an Arbitrary File Write Vulnerability on Windows when Parsing and Saving a Malicious Bundle
Critical
CVE-2023-49785
NextChat has full-read SSRF and XSS vulnerability in /api/cors endpoint
Critical
CVE-2024-34344
Nuxt vulnerable to remote code execution via the browser when running the test locally
High
CVE-2024-23657
Nuxt Devtools has a Path Traversal: '../filedir'
High
CVE-2024-39698
electron-updater Code Signing Bypass on Windows
High
CVE-2024-34065
@strapi/plugin-users-permissions leaks 3rd party authentication tokens and authentication bypass
Medium
CVE-2024-31217
@strapi/plugin-upload has a Denial-of-Service via Improper Exception Handling
High
CVE-2024-36120
javascript-deobfuscator crafted payload can lead to code execution
Low
CVE-2023-1001
vxe-table Cross-site Scripting vulnerability
Medium
CVE-2024-4067
Regular Expression Denial of Service (ReDoS) in micromatch
High
CVE-2024-4068
Uncontrolled resource consumption in braces
Medium
CVE-2023-50717
NocoDB Allows Preview of Files with Dangerous Content
High
CVE-2024-34351
Next.js Server-Side Request Forgery in Server Actions
High
CVE-2023-36821
Uptime Kuma vulnerable to authenticated remote code execution via malicious plugin installation
Medium
CVE-2024-58376
Renovate vulnerable to arbitrary command injection via helmv3 manager and registryAliases
Medium
CVE-2024-32869
Hono vulnerable to Restricted Directory Traversal in serveStatic with deno
Critical
CVE-2024-30564
@andrei-tatar/nora-firebase-common Prototype Pollution vulnerability
Low
ghsa-82jv-9wjw-pqh6
Prototype pollution in emit function
Medium
CVE-2021-4438
React Native Sms User Consent Intent Redirection Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.