Medium
CVE-2024-1899
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
Critical
ghsa-84c3-j8r2-mcm8
@nfid/embed has compromised private key due to @dfinity/auth-client producing insecure session keys
Low
CVE-2024-27088
es5-ext vulnerable to Regular Expression Denial of Service in `function#copy` and `function#toStringTokens`
Medium
CVE-2024-21501
sanitize-html Information Exposure vulnerability
High
CVE-2024-26150
`@backstage/backend-common` vulnerable to path traversal through symlinks
Critical
CVE-2024-1631
agent-js: Insecure Key Generation in `Ed25519KeyIdentity.generate`
High
CVE-2024-26135
MeshCentral cross-site websocket hijacking (CSWSH) vulnerability
High
CVE-2024-1648
Cross-site Scripting in electron-pdf
Medium
CVE-2024-26318
Cross-site Scripting in Serenity
High
ghsa-w4hv-vmv9-hgcr
GitHub Security Lab (GHSL) Vulnerability Report, scrypted: `GHSL-2023-218`, `GHSL-2023-219`
Low
CVE-2024-24758
Undici proxy-authorization header not cleared on cross-origin redirect in fetch
Medium
CVE-2024-24750
fetch(url) leads to a memory leak in undici
High
CVE-2024-25466
React Native Document Picker Directory Traversal vulnerability
Medium
CVE-2024-1163
mapshaper Path Traversal vulnerability
Low
CVE-2021-4437
lambda-middleware Inefficient Regular Expression Complexity vulnerability
Medium
CVE-2024-23724
Ghost has possible Cross-site Scripting issue
High
CVE-2024-21490
angular vulnerable to super-linear runtime due to backtracking
Medium
CVE-2024-24828
Pkg Local Privilege Escalation
Low
CVE-2023-42282
NPM IP package incorrectly identifies some private IP addresses as public
Medium
CVE-2023-4771
CKEditor cross-site scripting vulnerability in AJAX sample
Medium
CVE-2024-24816
CKEditor4 Cross-site Scripting vulnerability in samples with enabled the preview feature
Medium
CVE-2024-24815
CKEditor4 Cross-site Scripting vulnerability caused by incorrect CDATA detection
Critical
CVE-2024-24398
Stimulsoft Dashboard.JS directory traversal vulnerability
Medium
CVE-2024-24396
Stimulsoft Dashboard.JS Cross Site Scripting vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.