Critical
CVE-2024-27298
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,493
Reset filters
Medium
CVE-2024-21501
sanitize-html Information Exposure vulnerability
High
CVE-2024-26135
MeshCentral cross-site websocket hijacking (CSWSH) vulnerability
High
ghsa-w4hv-vmv9-hgcr
GitHub Security Lab (GHSL) Vulnerability Report, scrypted: `GHSL-2023-218`, `GHSL-2023-219`
Low
CVE-2023-42282
NPM IP package incorrectly identifies some private IP addresses as public
Medium
ghsa-mf74-qq7w-6j7v
Zmarkdown Server-Side Request Forgery (SSRF) in remark-download-images
Medium
CVE-2024-21485
Dash apps vulnerable to Cross-site Scripting
High
CVE-2024-23841
@apollo/experimental-nextjs-app-support Cross-site Scripting vulnerability
High
CVE-2024-24558
react-query-streamed-hydration Cross-site Scripting vulnerability
Medium
CVE-2024-23340
@hono/node-server cannot handle "double dots" in URL
High
CVE-2024-23331
Vite dev server option `server.fs.deny` can be bypassed when hosted on case-insensitive filesystem
Medium
CVE-2024-22207
Default swagger-ui configuration exposes all files in the module
Medium
CVE-2023-51701
@fastify/reply-from JSON Content-Type parsing confusion
Critical
CVE-2023-7080
Arbitrary remote code execution within `wrangler dev` Workers sandbox
Medium
CVE-2023-7079
Arbitrary remote file read in Wrangler dev server
High
CVE-2023-39655
CouchAuth host header injection vulnerability leaks the password reset token
High
CVE-2023-7078
Miniflare vulnerable to Server-Side Request Forgery (SSRF)
High
CVE-2023-50249
Sentry's Astro SDK vulnerable to ReDoS
Medium
CVE-2023-50710
Named path parameters can be overridden in TrieRouter
Medium
CVE-2023-49804
Password Change Vulnerability
High
CVE-2023-49799
SSRF & Credentials Leak
High
CVE-2023-49800
DOS by abusing `fetchOptions.retry`.
Medium
CVE-2023-49293
Vite XSS vulnerability in `server.transformIndexHtml` via URL payload
Low
CVE-2023-48711
google-translate-api-browser Server-Side Request Forgery (SSRF) Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.