Alta
CVE-2022-36079
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 2.476
Restablecer filtros
Crítica
CVE-2022-2900
Server-Side Request Forgery (SSRF) in GitHub repository ionicabizau/parse-url
Media
CVE-2022-36046
Next.js is a React framework that can provide building blocks to create web applications. All of the following must be true to be affected by this CVE: Next.js version 12.2.3, Node.js version above v1
Media
ghsa-v78c-4p63-2j6c
Cleartext Transmission of Sensitive Information in moment-timezone
Alta
CVE-2020-26938
oauth2-server through 3.1.1 vulnerable to Open Redirect
Crítica
CVE-2022-36010
React Editable Json Tree vulnerable to arbitrary code execution via function parsing
Media
CVE-2022-35949
`undici.request` vulnerable to SSRF using absolute URL on `pathname`
Media
ghsa-2fvv-qxrq-7jq6
apollo-server-core vulnerable to URL-based XSS attack affecting IE11 on default landing page
Alta
CVE-2022-36313
file-type vulnerable to Infinite Loop via malformed MKV file
Media
CVE-2022-25875
Svelte vulnerable to XSS when using objects during server-side rendering
Alta
CVE-2022-31112
Protected fields exposed via LiveQuery
Alta
CVE-2022-31127
Improper handling of email input
Alta
CVE-2022-31129
Moment.js vulnerable to Inefficient Regular Expression Complexity
Media
CVE-2022-25876
Server-Side Request Forgery in link-preview-js
Crítica
CVE-2022-2216
Server-Side Request Forgery in parse-url
Media
CVE-2022-31110
Denial of Service (DoS) vulnerability in RSSHub
Media
CVE-2022-23080
Server-Side Request Forgery in Directus
Alta
CVE-2022-31089
Invalid file request can crash server
Alta
CVE-2022-31083
Authentication bypass vulnerability in Apple Game Center auth adapter
Alta
CVE-2022-32210
ProxyAgent vulnerable to MITM
Media
CVE-2022-29257
AutoUpdater module fails to validate certain nested components of the bundle
Alta
CVE-2022-2062
NocoDB information disclosure vulnerability
Crítica
CVE-2022-31830
Server-Side Request Forgery in kityminder
Alta
CVE-2022-25863
Unsanitized JavaScript code injection possible in gatsby-plugin-mdx
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.