Medium
CVE-2024-28863
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,614
Reset filters
High
CVE-2024-29180
Path traversal in webpack-dev-middleware
High
CVE-2024-28121
StimulusReflex arbitrary method call
Medium
CVE-2024-27927
RSSHub vulnerable to Server-Side Request Forgery
High
CVE-2024-27303
electron-builder's NSIS installer - execute arbitrary code on the target machine (Windows only)
High
CVE-2024-27295
Directus has MySQL accent insensitive email matching
Medium
CVE-2024-21501
sanitize-html Information Exposure vulnerability
High
CVE-2024-26135
MeshCentral cross-site websocket hijacking (CSWSH) vulnerability
Medium
CVE-2024-24566
@lobehub/chat vulnerable to unauthorized access to plugins
Critical
CVE-2023-7080
Arbitrary remote code execution within `wrangler dev` Workers sandbox
Medium
CVE-2023-49804
Password Change Vulnerability
High
CVE-2023-26158
mockjs vulnerable to Prototype Pollution via the Util.extend function
Medium
ghsa-hfxh-rjv7-2369
Uptime Kuma Authenticated remote code execution via TailscalePing
Medium
ghsa-wm63-7627-ch33
@vendure/core's insecure currencyCode handling allows wrong payment amounts
Medium
CVE-2019-25155
DOMPurify Open Redirect vulnerability
Medium
CVE-2021-43849
cordova-plugin-fingerprint-aio DoS vulnerability
High
CVE-2023-46115
Tauri's Updater Private Keys Possibly Leaked via Vite Environment Variables
High
CVE-2023-45820
Directus crashes on invalid WebSocket message
Low
CVE-2023-45143
Undici's cookie header not cleared on cross-origin redirect in fetch
High
CVE-2023-43646
Chaijs/get-func-name vulnerable to ReDoS
Medium
CVE-2023-36472
Strapi may leak sensitive user information, user reset password, tokens via content-manager views
Low
ghsa-j5g3-5c8r-7qfx
Prevent logging invalid header values
Low
ghsa-q4pp-j36h-3gqg
Minimal `basti` IAM Policy Allows Shell Access
High
CVE-2023-40185
Shescape on Windows escaping may be bypassed in threaded context
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.