monospace Vulnerability Advisory Catalog

Total 54 security vulnerabilities recorded for monospace software and firmware.

← Back to All Vendors
Component: directus

Directus is a real-time API and App dashboard for managing SQL database content. The `@directus/storage-driver-s3` package starting in version 9.22.0 ...

📅 2025-03-26
CVSS 5.3 Dossier →
Component: directus

Directus is a real-time API and App dashboard for managing SQL database content. The `@directus/storage-driver-s3` package starting in version 9.22.0 ...

📅 2025-03-26
CVSS 5.3 Dossier →
Component: directus

Directus is a real-time API and App dashboard for managing SQL database content. In affected versions if there are two overlapping policies for the `u...

📅 2025-02-19
CVSS 5.4 Dossier →
Component: directus

Directus is a real-time API and App dashboard for managing SQL database content. Prior to version 11.2.0, when sharing an item, a typical user can spe...

📅 2025-01-23
CVSS 5.0 Dossier →
Component: directus

Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 11.0.0 and prior to version 11.3.0, when setting ...

📅 2024-12-09
CVSS 7.5 Dossier →
Component: directus

Directus is a real-time API and App dashboard for managing SQL database content. The Comment feature has implemented a filter to prevent users from ad...

📅 2024-12-05
CVSS 5.7 Dossier →
Component: directus

Directus is a real-time API and App dashboard for managing SQL database content. Access tokens from query strings are not redacted and are potentially...

📅 2024-10-08
CVSS 4.2 Dossier →
Component: directus

Directus is a real-time API and App dashboard for managing SQL database content. When relying on blocking access to localhost using the default `0.0.0...

📅 2024-09-18
CVSS 5.0 Dossier →
Component: directus

Directus is a real-time API and App dashboard for managing SQL database content. An unauthenticated user can access credentials of last authenticated ...

📅 2024-09-10
CVSS 7.4 Dossier →
CVE-2024-6534 MEDIUM
Component: directus

Directus v10.13.0 allows an authenticated external attacker to modify presets created by the same user to assign them to another user. This is possibl...

📅 2024-08-15
CVSS 4.3 Dossier →
CVE-2024-6533 MEDIUM
Component: directus

Directus v10.13.0 allows an authenticated external attacker to execute arbitrary JavaScript on the client. This is possible because the application in...

📅 2024-08-15
CVSS 5.4 Dossier →
Component: directus

Directus is a real-time API and App dashboard for managing SQL database content. When relying on SSO providers in combination with local authenticatio...

📅 2024-07-08
CVSS 7.5 Dossier →
Component: directus

Directus is a real-time API and App dashboard for managing SQL database content. A denial of service (DoS) attack by field duplication in GraphQL is a...

📅 2024-07-08
CVSS 6.5 Dossier →
Component: directus

Directus is a real-time API and App dashboard for managing SQL database content. Directus >=9.23.0, <=v10.5.3 improperly handles _in, _nin operators. ...

📅 2024-07-08
CVSS 6.3 Dossier →
Component: directus

Directus is a real-time API and App dashboard for managing SQL database content. There was already a reported SSRF vulnerability via file import. It w...

📅 2024-07-08
CVSS 5.0 Dossier →
Component: directus

Directus is a real-time API and App dashboard for managing SQL database content. Prior to 10.11.2, providing a non-numeric length value to the random ...

📅 2024-06-03
CVSS 7.5 Dossier →
Component: directus

Directus is a real-time API and App dashboard for managing SQL database content. Prior to 10.11.0, session tokens function like the other JWT tokens w...

📅 2024-05-14
CVSS 5.4 Dossier →
Component: directus

Directus is a real-time API and App dashboard for managing SQL database content. A user with permission to view any collection using redacted hashed f...

📅 2024-05-14
CVSS 4.9 Dossier →
Component: directus

Directus is a real-time API and App dashboard for managing SQL database content. The authentication API has a `redirect` parameter that can be exploit...

📅 2024-03-12
CVSS 5.4 Dossier →
Component: directus

Directus is a real-time API and App dashboard for managing SQL database content. When reaching the /files page, a JWT is passed via GET request. Inclu...

📅 2024-03-12
CVSS 2.3 Dossier →
Component: directus

Directus is a real-time API and App dashboard for managing SQL database content. Prior to version 10.8.3, the exact Directus version number was being ...

📅 2024-03-01
CVSS 5.3 Dossier →
Component: directus

Directus is a real-time API and App dashboard for managing SQL database content. The password reset mechanism of the Directus backend allows attackers...

📅 2024-03-01
CVSS 8.2 Dossier →
Component: directus

Directus is a real-time API and App dashboard for managing SQL database content. In affected versions any Directus installation that has websockets en...

📅 2023-10-19
CVSS 5.9 Dossier →
Component: directus

Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 10.3.0 and prior to version 10.5.0, the permissio...

📅 2023-07-25
CVSS 5.7 Dossier →
Page 2 of 3 (54 Total Records)