Medium
CVE-2024-34343
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 920
Reset filters
Medium
CVE-2024-39918
@jmondi/url-to-png contains a Path Traversal vulnerability
High
CVE-2024-39895
Directus GraphQL Field Duplication Denial of Service (DoS)
Medium
CVE-2024-38527
Cross-site Scripting in ZenUML
High
CVE-2024-34065
@strapi/plugin-users-permissions leaks 3rd party authentication tokens and authentication bypass
High
CVE-2024-36120
javascript-deobfuscator crafted payload can lead to code execution
Medium
CVE-2024-4067
Regular Expression Denial of Service (ReDoS) in micromatch
High
CVE-2023-49781
NocoDB Vulnerable to Stored Cross-Site Scripting in Formula.vue
Critical
CVE-2024-32962
xml-crypto vulnerable to XML signature verification bypass due improper verification of signature/signature spoofing
Medium
CVE-2024-29504
Summernote vulnerable to cross-site scripting
Medium
CVE-2024-29881
TinyMCE Cross-Site Scripting (XSS) vulnerability in handling external SVG files through Object or Embed elements
Medium
CVE-2024-28863
Denial of service while parsing a tar file due to lack of folders count validation
High
CVE-2024-28121
StimulusReflex arbitrary method call
Medium
CVE-2024-28176
jose vulnerable to resource exhaustion via specifically crafted JWE with compressed plaintext
High
CVE-2024-26135
MeshCentral cross-site websocket hijacking (CSWSH) vulnerability
Critical
CVE-2024-24398
Stimulsoft Dashboard.JS directory traversal vulnerability
Medium
CVE-2024-24396
Stimulsoft Dashboard.JS Cross Site Scripting vulnerability
Medium
CVE-2024-24397
Stimulsoft Dashboard.JS Cross Site Scripting vulnerability
Medium
CVE-2024-23725
Cross-site Scripting in Ghost
Medium
CVE-2023-49293
Vite XSS vulnerability in `server.transformIndexHtml` via URL payload
Low
CVE-2023-48711
google-translate-api-browser Server-Side Request Forgery (SSRF) Vulnerability
Medium
ghsa-hfxh-rjv7-2369
Uptime Kuma Authenticated remote code execution via TailscalePing
Medium
CVE-2023-49276
Attribute Injection leading to XSS(Cross-Site-Scripting)
Medium
CVE-2023-48223
JWT Algorithm Confusion
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.