Directus is a real-time API and App dashboard for managing SQL database content. The `@directus/storage-driver-s3` package starting in version 9.22.0 ...
monospace Vulnerability Advisory Catalog
Total 54 security vulnerabilities recorded for monospace software and firmware.
Directus is a real-time API and App dashboard for managing SQL database content. The `@directus/storage-driver-s3` package starting in version 9.22.0 ...
Directus is a real-time API and App dashboard for managing SQL database content. In affected versions if there are two overlapping policies for the `u...
Directus is a real-time API and App dashboard for managing SQL database content. Prior to version 11.2.0, when sharing an item, a typical user can spe...
Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 11.0.0 and prior to version 11.3.0, when setting ...
Directus is a real-time API and App dashboard for managing SQL database content. The Comment feature has implemented a filter to prevent users from ad...
Directus is a real-time API and App dashboard for managing SQL database content. Access tokens from query strings are not redacted and are potentially...
Directus is a real-time API and App dashboard for managing SQL database content. When relying on blocking access to localhost using the default `0.0.0...
Directus is a real-time API and App dashboard for managing SQL database content. An unauthenticated user can access credentials of last authenticated ...
Directus v10.13.0 allows an authenticated external attacker to modify presets created by the same user to assign them to another user. This is possibl...
Directus v10.13.0 allows an authenticated external attacker to execute arbitrary JavaScript on the client. This is possible because the application in...
Directus is a real-time API and App dashboard for managing SQL database content. When relying on SSO providers in combination with local authenticatio...
Directus is a real-time API and App dashboard for managing SQL database content. A denial of service (DoS) attack by field duplication in GraphQL is a...
Directus is a real-time API and App dashboard for managing SQL database content. Directus >=9.23.0, <=v10.5.3 improperly handles _in, _nin operators. ...
Directus is a real-time API and App dashboard for managing SQL database content. There was already a reported SSRF vulnerability via file import. It w...
Directus is a real-time API and App dashboard for managing SQL database content. Prior to 10.11.2, providing a non-numeric length value to the random ...
Directus is a real-time API and App dashboard for managing SQL database content. Prior to 10.11.0, session tokens function like the other JWT tokens w...
Directus is a real-time API and App dashboard for managing SQL database content. A user with permission to view any collection using redacted hashed f...
Directus is a real-time API and App dashboard for managing SQL database content. The authentication API has a `redirect` parameter that can be exploit...
Directus is a real-time API and App dashboard for managing SQL database content. When reaching the /files page, a JWT is passed via GET request. Inclu...
Directus is a real-time API and App dashboard for managing SQL database content. Prior to version 10.8.3, the exact Directus version number was being ...
Directus is a real-time API and App dashboard for managing SQL database content. The password reset mechanism of the Directus backend allows attackers...
Directus is a real-time API and App dashboard for managing SQL database content. In affected versions any Directus installation that has websockets en...
Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 10.3.0 and prior to version 10.5.0, the permissio...