High
CVE-2024-39698
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,629
Reset filters
High
CVE-2024-34065
@strapi/plugin-users-permissions leaks 3rd party authentication tokens and authentication bypass
Medium
CVE-2024-31217
@strapi/plugin-upload has a Denial-of-Service via Improper Exception Handling
High
CVE-2024-36120
javascript-deobfuscator crafted payload can lead to code execution
Low
CVE-2023-1001
vxe-table Cross-site Scripting vulnerability
Medium
CVE-2024-4067
Regular Expression Denial of Service (ReDoS) in micromatch
High
CVE-2024-4068
Uncontrolled resource consumption in braces
Medium
CVE-2023-50717
NocoDB Allows Preview of Files with Dangerous Content
High
CVE-2024-34351
Next.js Server-Side Request Forgery in Server Actions
High
CVE-2023-36821
Uptime Kuma vulnerable to authenticated remote code execution via malicious plugin installation
Medium
CVE-2024-58376
Renovate vulnerable to arbitrary command injection via helmv3 manager and registryAliases
Medium
CVE-2024-32869
Hono vulnerable to Restricted Directory Traversal in serveStatic with deno
Critical
CVE-2024-30564
@andrei-tatar/nora-firebase-common Prototype Pollution vulnerability
Low
ghsa-82jv-9wjw-pqh6
Prototype pollution in emit function
Medium
CVE-2021-4438
React Native Sms User Consent Intent Redirection Vulnerability
Medium
CVE-2024-28863
Denial of service while parsing a tar file due to lack of folders count validation
High
CVE-2024-29180
Path traversal in webpack-dev-middleware
High
CVE-2024-28121
StimulusReflex arbitrary method call
Medium
CVE-2024-27927
RSSHub vulnerable to Server-Side Request Forgery
High
CVE-2024-27303
electron-builder's NSIS installer - execute arbitrary code on the target machine (Windows only)
High
CVE-2024-27295
Directus has MySQL accent insensitive email matching
Medium
CVE-2024-21501
sanitize-html Information Exposure vulnerability
High
CVE-2024-26135
MeshCentral cross-site websocket hijacking (CSWSH) vulnerability
Medium
CVE-2024-24566
@lobehub/chat vulnerable to unauthorized access to plugins
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.