Critical
CVE-2024-32964
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,493
Reset filters
High
CVE-2024-34351
Next.js Server-Side Request Forgery in Server Actions
High
CVE-2023-36821
Uptime Kuma vulnerable to authenticated remote code execution via malicious plugin installation
Medium
CVE-2023-36822
Uptime Kuma's authenticated path traversal via plugin repository name may lead to unavailability or data loss
High
CVE-2024-32866
Conform contains a Prototype Pollution Vulnerability in `parseWith...` function
Medium
CVE-2024-32869
Hono vulnerable to Restricted Directory Traversal in serveStatic with deno
Critical
CVE-2024-21511
MySQL2 for Node Arbitrary Code Injection
High
CVE-2024-32652
@hono/node-server has Denial of Service risk when receiving Host header that cannot be parsed
High
CVE-2024-30253
Handling untrusted input can result in a crash, leading to loss of availability / denial of service
High
CVE-2024-31999
@fastify/secure-session: Reuse of destroyed secure session cookie
Medium
CVE-2024-31453
PsiTransfer: Violation of the integrity of file distribution
Critical
CVE-2024-27448
MailDev Remote Code Execution
Medium
CVE-2024-31207
Vite's `server.fs.deny` did not deny requests for patterns with directories.
High
CVE-2024-29896
Content-Security-Policy header generation in middleware could be compromised by malicious injections
High
CVE-2024-29194
OneUptime Vulnerable to a Privilege Escalation via Local Storage Key Manipulation
Medium
CVE-2024-29042
Cache Poisoning Vulnerability
Medium
CVE-2024-28863
Denial of service while parsing a tar file due to lack of folders count validation
High
CVE-2024-29180
Path traversal in webpack-dev-middleware
Critical
CVE-2024-29027
Server crashes on invalid Cloud Function or Cloud Job name
Low
CVE-2024-28238
Session Token in URL in directus
High
CVE-2024-28121
StimulusReflex arbitrary method call
Medium
CVE-2024-27927
RSSHub vulnerable to Server-Side Request Forgery
Critical
CVE-2024-27922
HTTP Handling Vulnerability in the Bare server
Critical
ghsa-4g2x-vq5p-5vj6
Budibase affected by VM2 Constructor Escape Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.