High
CVE-2024-34273
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 5,032
Reset filters
High
CVE-2024-4068
Uncontrolled resource consumption in braces
Medium
CVE-2024-34709
Directus Lacks Session Tokens Invalidation
High
CVE-2023-49781
NocoDB Vulnerable to Stored Cross-Site Scripting in Formula.vue
Medium
CVE-2024-34708
Directus allows redacted data extraction on the API through "alias"
Medium
CVE-2023-50718
NocoDB SQL Injection vulnerability
Medium
CVE-2023-50717
NocoDB Allows Preview of Files with Dangerous Content
Critical
CVE-2024-34706
@valtimo/components exposes access token to form.io
Critical
CVE-2024-32964
lobe-chat `/api/proxy` endpoint Server-Side Request Forgery vulnerability
High
CVE-2024-34342
react-pdf vulnerable to arbitrary JavaScript execution upon opening a malicious PDF with PDF.js
Medium
CVE-2024-4367
PDF.js < 4.2.67 - Arbitrary JavaScript Execution
Medium
CVE-2024-34075
kurwov vulnerable to Denial of Service due to improper data sanitization
Critical
CVE-2024-32962
xml-crypto vulnerable to XML signature verification bypass due improper verification of signature/signature spoofing
High
CVE-2023-36821
Uptime Kuma vulnerable to authenticated remote code execution via malicious plugin installation
Medium
CVE-2023-36822
Uptime Kuma's authenticated path traversal via plugin repository name may lead to unavailability or data loss
High
CVE-2024-31621
Flowise vulnerable to code injection via api/v1
Medium
CVE-2024-33883
ejs lacks certain pollution protection
High
CVE-2024-32866
Conform contains a Prototype Pollution Vulnerability in `parseWith...` function
Medium
CVE-2024-58376
Renovate vulnerable to arbitrary command injection via helmv3 manager and registryAliases
Medium
CVE-2024-32869
Hono vulnerable to Restricted Directory Traversal in serveStatic with deno
High
CVE-2024-34347
@hoppscotch/cli affected by Sandbox Escape in @hoppscotch/js-sandbox leads to RCE
High
CVE-2024-32652
@hono/node-server has Denial of Service risk when receiving Host header that cannot be parsed
Low
ghsa-23q2-5gf8-gjpp
Enabling Authentication does not close all logged in socket connections immediately
Low
ghsa-82jv-9wjw-pqh6
Prototype pollution in emit function
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.