Medium
CVE-2023-35167
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 5,032
Reset filters
Medium
CVE-2023-35165
AWS CDK EKS overly permissive trust policies
Low
ghsa-68jh-rf6x-836f
@apollo/server vulnerable to unsafe application of Content Security Policy via reused nonces
Low
ghsa-gpv5-7x3g-ghjv
fast-xml-parser regex vulnerability patch could be improved from a safety perspective
Medium
CVE-2023-34247
@keystone-6/auth Open Redirect vulnerability
Medium
CVE-2021-26920
Druid ingestion system Authenticated users can read data from other sources than intended
Low
ghsa-5fp6-4xw3-xqq3
@keystone-6/core's bundled cuid package known to be insecure
Medium
CVE-2023-34238
Gatsby develop server has Local File Inclusion vulnerability
High
CVE-2023-34245
@udecode/plate-link does not sanitize URLs to prevent use of the `javascript:` scheme
Medium
CVE-2023-34234
OpenZeppelin Contracts's governor proposal creation may be blocked by frontrunning
High
CVE-2023-34092
Vite Server Options (server.fs.deny) can be bypassed using double forward-slash (//)
Medium
CVE-2023-32689
Phishing attack vulnerability by uploading malicious HTML file
High
CVE-2023-2968
proxy denial of service vulnerability
Medium
CVE-2023-33187
html inputs of type password recorded in plaintext when converted to text inputs
Critical
ghsa-7cgc-fjv4-52x6
Malware in pre-build binaries of bignum
Medium
CVE-2023-32325
Potential for cross-site scripting in PostHog-js
Critical
CVE-2023-32314
vm2 Sandbox Escape vulnerability
Medium
CVE-2023-2512
Buffer under-read in workerd
Critical
CVE-2023-2583
jsreport vulnerable to code injection
High
CVE-2023-31133
Ghost vulnerable to information disclosure of private API fields
Critical
CVE-2023-30846
Potential leak of authentication data to 3rd parties
Critical
CVE-2023-30363
Prototype Pollution in vConsole
High
CVE-2023-30843
Hidden fields can be leaked on readable collections in Payload
High
CVE-2023-30609
HTML injection in search results via plaintext message highlighting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.