Medium
CVE-2024-39001
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 5,032
Reset filters
High
CVE-2024-38999
jrburke requirejs vulnerable to prototype pollution
High
CVE-2024-38996
Prototype pollution in ag-grid-community via the _.mergeDeep function
Medium
CVE-2024-38997
adolph_dudu ratio-swiper was discovered to contain a prototype pollution via the function extendDefaults
High
CVE-2024-38994
@amoy/common v was discovered to contain a prototype pollution via the function extend
High
CVE-2024-38992
frappejs was discovered to contain a prototype pollution via the function registerView
High
CVE-2024-38991
akbr patch-into was discovered to contain a prototype pollution via the function patchInto
Medium
CVE-2024-38987
@aofl/cli-lib Prototype Pollution vulnerability
Medium
CVE-2024-38527
Cross-site Scripting in ZenUML
High
CVE-2024-37818
Strapi Server-Side Request Forgery (SSRF)
Medium
CVE-2024-38356
TinyMCE Cross-Site Scripting (XSS) vulnerability using noneditable_regexp option
Medium
CVE-2024-38357
TinyMCE Cross-Site Scripting (XSS) vulnerability using noscript elements
Medium
CVE-2024-37895
Lobe Chat API Key Leak
Medium
CVE-2024-37182
Mattermost Desktop App Remote Code Execution
Low
CVE-2024-36287
Mattermost Desktop App allows for bypassing TCC restrictions on macOS
High
CVE-2024-34065
@strapi/plugin-users-permissions leaks 3rd party authentication tokens and authentication bypass
Medium
CVE-2024-31217
@strapi/plugin-upload has a Denial-of-Service via Improper Exception Handling
Low
CVE-2024-29181
@strapi/plugin-content-manager leaks data via relations via the Admin Panel
High
CVE-2024-37166
ghtml Cross-Site Scripting (XSS) vulnerability
Medium
CVE-2024-37162
Generation of Error Message Containing Sensitive Information in zsa
Medium
CVE-2024-37169
Arbitrary file read via Playwright's screenshot feature exploiting file wrapper
High
CVE-2024-36857
Jan path traversal vulnerability
High
CVE-2024-36128
Directus is soft-locked by providing a string value to random string util
Medium
CVE-2022-25037
wangEditor was discovered to contain a cross-site scripting (XSS) vulnerability via the image upload function
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.