Vulnerability index

Browse CVEs

42 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Directus MEDIUM 5.0
CVE-2024-39699

Directus is a real-time API and App dashboard for managing SQL database content. There was already a reported SSRF vulnerability via file import. It …

Fix: 10.9.3+
Fix from $1,600 2024-07-08
Directus HIGH 7.5
CVE-2024-36128

Directus is a real-time API and App dashboard for managing SQL database content. Prior to 10.11.2, providing a non-numeric length value to the random…

Fix: 10.11.2+
Fix from $1,950 2024-06-03
Directus MEDIUM 5.4
CVE-2024-34709

Directus is a real-time API and App dashboard for managing SQL database content. Prior to 10.11.0, session tokens function like the other JWT tokens …

Fix: 10.11.0+
Fix from $1,600 2024-05-14
Directus HIGH 8.2
CVE-2024-27295

Directus is a real-time API and App dashboard for managing SQL database content. The password reset mechanism of the Directus backend allows attacker…

Fix: 10.8.3+
Fix from $1,950 2024-03-01
Directus MEDIUM 5.3
CVE-2024-27296

Directus is a real-time API and App dashboard for managing SQL database content. Prior to version 10.8.3, the exact Directus version number was being…

Fix: 10.8.3+
Fix from $1,600 2024-03-01
Directus MEDIUM 6.5
CVE-2023-45820

Directus is a real-time API and App dashboard for managing SQL database content. In affected versions any Directus installation that has websockets e…

Fix: 10.6.2+
Fix from $1,600 2023-10-19
Directus MEDIUM 6.5
CVE-2023-38503

Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 10.3.0 and prior to version 10.5.0, the permissi…

Fix: 10.5.0+
Fix from $1,600 2023-07-25
Directus MEDIUM 6.5
CVE-2020-19850

An issue found in Directus API v.2.2.0 allows a remote attacker to cause a denial of service via a great amount of HTTP requests.

Patch available
Fix from $1,600 2023-04-04
Directus MEDIUM 5.5
CVE-2023-28443

Directus is a real-time API and App dashboard for managing SQL database content. Prior to version 9.23.3, the `directus_refresh_token` is not redacte…

Fix: 9.23.3+
Fix from $1,600 2023-03-24
Directus HIGH 7.5
CVE-2023-26492

Directus is a real-time API and App dashboard for managing SQL database content. Directus is vulnerable to Server-Side Request Forgery (SSRF) when im…

Fix: 9.23.0+
Fix from $1,950 2023-03-03
Directus CRITICAL 9.8
CVE-2022-26969

In Directus before 9.7.0, the default settings of CORS_ORIGIN and CORS_ENABLED are true.

Fix: 9.7.0+
Fix from $2,300 2022-12-26
Directus MEDIUM 6.5
CVE-2022-36031

Directus is a free and open-source data platform for headless content management. The Directus process can be aborted by having an authorized user up…

Fix: 9.15.0+
Fix from $1,600 2022-08-19