Rezultati pretraživanja za 'Proizvođač: zeit'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2022-36046 | 5.3 | Next.js is a React framework that can provide building blocks to create web applications. All of the following must be true to be affected by this CVE: Next.js version 12.2.3, Node.js version above v15.0.0 being used with strict `unhandledRejection` | 2022-09-07 16:59:00 | 2022-08-31 19:15:00 |
| CVE-2022-23646 | 4.3 | Next.js is a React framework. Starting with version 10.0.0 and prior to version 12.1.0, Next.js is vulnerable to User Interface (UI) Misrepresentation of Critical Information. In order to be affected, the `next.config.js` file must have an `images.do | 2022-02-25 17:44:00 | 2022-02-17 21:15:00 |
| CVE-2021-39178 | 4.3 | Next.js is a React framework. Versions of Next.js between 10.0.0 and 11.0.0 contain a cross-site scripting vulnerability. In order for an instance to be affected by the vulnerability, the `next.config.js` file must have `images.domains` array assigne | 2021-09-08 13:26:00 | 2021-08-31 00:15:00 |
| CVE-2021-37699 | 5.8 | Next.js is an open source website development framework to be used with the React library. In affected versions specially encoded paths could be used when pages/_error.js was statically generated allowing an open redirect to occur to an external site | 2021-08-20 12:46:00 | 2021-08-12 00:15:00 |
| CVE-2020-15242 | 5.8 | Next.js versions >=9.5.0 and <9.5.4 are vulnerable to an Open Redirect. Specially encoded paths could be used with the trailing slash redirect to allow an open redirect to occur to an external site. In general, this redirect does not directly harm us | 2020-12-03 13:43:00 | 2020-10-08 20:15:00 |
| CVE-2019-5415 | 5.0 | A bug in handling the ignore files and directories feature in serve 6.5.3 allows an attacker to read a file or list the directory that the victim has not allowed access to. | 2020-10-19 17:59:00 | 2019-03-21 16:01:00 |
| CVE-2020-5284 | 5.0 | Next.js versions before 9.3.2 have a directory traversal vulnerability. Attackers could craft special requests to access files in the dist directory (.next). This does not affect files outside of the dist directory (.next). In general, the dist direc | 2020-04-01 20:08:00 | 2020-03-30 22:15:00 |
| CVE-2018-3712 | 4.0 | serve node module before 6.4.9 suffers from a Path Traversal vulnerability due to not handling %2e (.) and %2f (/) and allowing them in paths, which allows a malicious user to view the contents of any directory with known path. | 2019-10-09 23:40:00 | 2018-06-07 02:29:00 |
| CVE-2019-5417 | 5.0 | A path traversal vulnerability in serve npm package version 7.0.1 allows the attackers to read content of arbitrary files on the remote server. | 2019-03-25 18:47:00 | 2019-03-21 16:01:00 |
| CVE-2018-18282 | 4.3 | Next.js 7.0.0 and 7.0.1 has XSS via the 404 or 500 /_error page. | 2018-11-28 16:36:00 | 2018-10-12 22:29:00 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/8
Zapisa po stranici: