High
CVE-2022-36059
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 5,032
Reset filters
Critical
CVE-2023-28444
angular-server-side-configuration information disclosure vulnerability in monorepo with node.js backend
Medium
CVE-2023-28443
directus vulnerable to Insertion of Sensitive Information into Log File
Medium
CVE-2023-28155
Server-Side Request Forgery in Request
High
CVE-2023-27490
Missing proper state, nonce and PKCE checks for OAuth authentication
High
CVE-2022-43441
sqlite vulnerable to code execution due to Object coercion
Medium
CVE-2023-27481
Directus vulnerable to extraction of password hashes through export querying
High
CVE-2023-27474
directus vulnerable to HTML Injection in Password Reset email to custom Reset URL
Medium
CVE-2023-26492
Directus vulnerable to Server-Side Request Forgery On File Import
Medium
CVE-2023-26488
OpenZeppelin Contracts contains Incorrect Calculation
Medium
ghsa-cp47-r258-q626
Vega vulnerable to arbitrary code execution when clicking href links
Medium
CVE-2022-2237
keycloak-connect contains Open redirect vulnerability in the Node.js adapter
Medium
CVE-2023-26486
Vega Expression Language `scale` expression function Cross Site Scripting
Medium
CVE-2023-26487
Vega has Cross-site Scripting vulnerability in `lassoAppend` function
Medium
CVE-2023-26491
rsshub vulnerable to Cross-site Scripting via unvalidated URL parameters
High
CVE-2023-26105
mde utilities contains Prototype Pollution
High
CVE-2022-44310
ecdh vulnerable to Exposure of Resource to Wrong Sphere
Critical
CVE-2023-22578
Sequelize - Default support for “raw attributes” when using parentheses
Medium
CVE-2022-48345
@braintree/sanitize-url Cross-site Scripting vulnerability
Critical
CVE-2023-22579
Unsafe fall-through in getWhereConditions
Medium
CVE-2021-32860
iziModal Cross-site Scripting vulnerability
Medium
CVE-2021-32855
Vditor Cross-site Scripting vulnerability
High
CVE-2023-25653
Improper calculations in ECC implementation can trigger a Denial-of-Service (DoS)
Medium
CVE-2025-27098
Unwanted access to the entire file system vulnerability due to a missing check in `staticFiles` HTTP handler
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.