Alta
CVE-2022-39203
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 5.032
Restablecer filtros
Baja
CVE-2022-36036
Improper Control of Generation of Code ('Code Injection') in mdx-mermaid
Crítica
CVE-2022-36045
Cryptographically weak PRNG in `utils.generateUUID`
Baja
ghsa-56x4-j7p9-fcf9
Command Injection in moment-timezone
Media
ghsa-v78c-4p63-2j6c
Cleartext Transmission of Sensitive Information in moment-timezone
Media
CVE-2022-36031
Directus vulnerable to unhandled exception on illegal filename_disk value
Alta
CVE-2020-26938
oauth2-server through 3.1.1 vulnerable to Open Redirect
Crítica
CVE-2022-36010
React Editable Json Tree vulnerable to arbitrary code execution via function parsing
Media
CVE-2022-35948
Nodejs ‘undici’ vulnerable to CRLF Injection via Content-Type
Media
CVE-2022-35954
@actions/core has Delimiter Injection Vulnerability in exportVariable
Alta
CVE-2022-35961
OpenZeppelin Contracts vulnerable to ECDSA signature malleability
Media
ghsa-2fvv-qxrq-7jq6
apollo-server-core vulnerable to URL-based XSS attack affecting IE11 on default landing page
Alta
CVE-2022-31198
OpenZeppelin Contracts's GovernorVotesQuorumFraction updates to quorum may affect past defeated proposals
Media
CVE-2022-35916
OpenZeppelin Contracts's Cross chain utilities for Arbitrum L2 see EOA calls as cross chain calls
Media
CVE-2022-35915
OpenZeppelin Contracts ERC165Checker unbounded gas consumption
Crítica
CVE-2022-35942
loopback-connector-postgresql Vulnerable to Improper Sanitization of `contains` Filter
Media
CVE-2022-31175
CKEditor5 cross-site scripting vulnerability caused by the editor instance destroying process
Baja
CVE-2022-31186
next-auth before v4.10.2 and v3.29.9 leaks excessive information into log
Media
CVE-2022-35144
Raneto vulnerable to Cross-site Scripting
Crítica
CVE-2022-35143
Raneto v0.17.0 employs weak password complexity requirements
Crítica
CVE-2020-7795
get-npm-package-version Command Injection vulnerability
Crítica
CVE-2022-35924
NextAuth.js before 4.10.3 and 3.29.10 sending verification requests (magic link) to unwanted emails
Media
CVE-2021-23397
@ianwalter/merge Prototype Pollution via `merge` function
Crítica
CVE-2021-23373
set-deep-prop Prototype Pollution
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.