Medium
CVE-2023-25571
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 5,032
Reset filters
Medium
CVE-2023-25572
Cross-Site-Scripting attack on `<RichTextField>`
Medium
CVE-2023-25166
@sideway/formula contains Regular Expression Denial of Service (ReDoS) Vulnerability
High
CVE-2023-23925
Switcher Client contains Regular Expression Denial of Service (ReDoS)
Medium
CVE-2022-48285
JSZip contains Path Traversal via loadAsync
Medium
ghsa-crhg-xgrg-vvcc
a12nserver vulnerable to potential SQL Injections via Knex dependency
High
CVE-2023-22493
RSSHub SSRF vulnerability
High
CVE-2023-22491
gatsby-transformer-remark has possible unsanitized JavaScript code injection
High
CVE-2023-0163
convict vulnerable to Prototype Pollution
Medium
CVE-2022-3145
@okta/oidc-middlewareOpen Redirect vulnerability
High
CVE-2023-22467
Luxon Inefficient Regular Expression Complexity vulnerability
High
CVE-2023-22461
@mattkrick/sanitize-svg vulnerable to Cross-Site Scripting (XSS)
High
CVE-2021-32821
MooTools Regular Expression Denial of Service
High
CVE-2018-25049
email-existence Inefficient Regular Expression Complexity vulnerability
High
CVE-2022-46175
json5 <= 1.0.1 and 2.0.0-2.2.1 - Prototype Pollution
Medium
CVE-2020-24855
easywebpack-cli Path Traversal vulnerability
Medium
CVE-2022-23494
Cross-site scripting vulnerability in TinyMCE alerts
High
CVE-2022-23487
libp2p DoS vulnerability from lack of resource management
Critical
CVE-2022-46164
NodeBB vulnerable to account takeover via prototype vulnerability
Critical
CVE-2022-42496
nadesiko3 vulnerable to OS Command Injection
Medium
CVE-2022-22984
Snyk plugins vulnerable to Command Injection
High
CVE-2022-41654
ghost vulnerable to unauthorized newsletter modification via improper access controls
High
CVE-2022-38900
decode-uri-component <= 0.2.1 - Denial of Service
Low
ghsa-8jh9-wqpf-q52c
sweetalert2 v8.19.1 and above contains hidden functionality
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.