Medium
CVE-2024-43407
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 144
Reset filters
Medium
CVE-2024-39919
@jmondi/url-to-png enables capture screenshot of localhost web services (unauthenticated pages)
Medium
CVE-2024-39918
@jmondi/url-to-png contains a Path Traversal vulnerability
Medium
CVE-2024-37169
Arbitrary file read via Playwright's screenshot feature exploiting file wrapper
Medium
CVE-2024-28244
KaTeX's maxExpand bypassed by Unicode sub/superscripts
Medium
CVE-2024-58379
nodemailer ReDoS when trying to send a specially crafted email
Medium
CVE-2023-38691
matrix-appservice-bridge doesn't verify the sub parameter of an openId token exhange, allowing unauthorized access to provisioning APIs
Medium
CVE-2023-38698
.eth registrar controller can shorten the duration of registered names
Critical
ghsa-7cgc-fjv4-52x6
Malware in pre-build binaries of bignum
High
ghsa-xv3q-jrmm-4fxv
Authentication Bypass in @strapi/plugin-users-permissions
High
CVE-2022-39251
matrix-js-sdk subject to user spoofing via Olm/Megolm protocol confusion
High
CVE-2022-31127
Improper handling of email input
High
CVE-2021-37701
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links
High
CVE-2021-37712
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links
High
CVE-2021-37713
Arbitrary File Creation/Overwrite on Windows via insufficient relative path sanitization
High
CVE-2021-39134
@npmcli/arborist vulnerable to UNIX Symbolic Link (Symlink) Following
High
CVE-2021-39135
UNIX Symbolic Link (Symlink) Following in @npmcli/arborist
Low
ghsa-xh2p-7p87-fhgh
Incorrect TCR calculation in batchLiquidateTroves() during Recovery Mode
High
CVE-2021-32804
Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization
High
CVE-2021-32803
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning
Medium
CVE-2021-3163
Cross-site Scripting in quill
High
CVE-2017-18924
Code Injection in oauth2-server
High
CVE-2021-1725
botframework-connector vulnerable to Improper Authentication
Critical
CVE-2017-5954
Code Execution Through IIFE in serialize-to-js
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.