Medium
CVE-2024-24397
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
High
CVE-2021-4435
Yarn untrusted search path vulnerability
Medium
ghsa-mf74-qq7w-6j7v
Zmarkdown Server-Side Request Forgery (SSRF) in remark-download-images
Low
ghsa-mq6v-w35g-3c97
Local File Inclusion vulnerability in zmarkdown
High
CVE-2023-51838
Ylianst MeshCentral 1.1.16 suffers from Use of a Broken or Risky Cryptographic Algorithm.
Medium
CVE-2024-21485
Dash apps vulnerable to Cross-site Scripting
Medium
CVE-2024-58379
nodemailer ReDoS when trying to send a specially crafted email
Medium
CVE-2024-24566
@lobehub/chat vulnerable to unauthorized access to plugins
High
CVE-2024-23841
@apollo/experimental-nextjs-app-support Cross-site Scripting vulnerability
High
CVE-2024-24556
@urql/next Cross-site Scripting vulnerability
High
CVE-2024-24558
react-query-streamed-hydration Cross-site Scripting vulnerability
High
CVE-2024-21488
network Arbitrary Command Injection vulnerability
Critical
CVE-2023-51837
Ylianst MeshCentral Missing SSL Certificate Validation
Critical
CVE-2023-51839
DeviceFarmer stf uses DES-ECB
High
CVE-2023-51842
MeshCentral algorithm-downgrade issue
High
CVE-2024-23641
Sending a GET or HEAD request with a body crashes SvelteKit
Medium
CVE-2024-23339
Prototype pollution not blocked by object-path related utilities in hoolock
Medium
CVE-2024-23340
@hono/node-server cannot handle "double dots" in URL
Medium
CVE-2024-23725
Cross-site Scripting in Ghost
High
ghsa-wg2x-rv86-mmpx
SPV Merkle proof malleability allows the maintainer to prove invalid transactions
High
CVE-2024-23331
Vite dev server option `server.fs.deny` can be bypassed when hosted on case-insensitive filesystem
High
CVE-2024-21484
Marvin Attack of RSA and RSAOAEP decryption in jsrsasign
Medium
CVE-2024-22207
Default swagger-ui configuration exposes all files in the module
Critical
CVE-2023-46943
EverShop at risk to unauthorized access via weak HMAC secret
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.