High
ghsa-3qmc-2r76-4rqp
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
High
CVE-2022-41879
Parse Server is vulnerable to Prototype Pollution via Cloud Code Webhooks
Medium
CVE-2022-36077
Exfiltration of hashed SMB credentials on Windows via file:// redirect
High
CVE-2022-41878
Parse Server vulnerable to Prototype Pollution via Cloud Code Webhooks or Cloud Code Triggers
Critical
CVE-2022-39396
Remote code execution via MongoDB BSON parser through prototype pollution
High
CVE-2022-39386
fastify/websocket vulnerable to uncaught exception via crash on malformed packet
Medium
CVE-2022-42743
deep-parse-json vulnerable to Prototype Pollution
Medium
CVE-2022-41714
fastest-json-copy vulnerable to Prototype Pollution
Medium
CVE-2022-41713
deep-object-diff vulnerable to Prototype Pollution
Medium
CVE-2022-41710
Markdownify has Files or Directories Accessible to External Parties
Critical
CVE-2022-39382
@keystone-6/core's NODE_ENV defaults to development with esbuild
Medium
ghsa-8r69-3cvp-wxc3
Batched HTTP requests may set incorrect `cache-control` response header
High
CVE-2022-39381
Unchecked Return Value to NULL Pointer Dereference in PDFDocumentHandler.cpp
Critical
CVE-2022-39353
xmldom allows multiple root nodes in a DOM
Medium
CVE-2022-3783
node-red-dashboard vulnerable to Cross-site Scripting
High
CVE-2022-25892
muhammara and hummus vulnerable to denial of service by NULL pointer dereference
High
CVE-2022-25885
muhammara and hummus vulnerable to null pointer dereference on bad response object
High
CVE-2022-37620
kangax html-minifier REDoS vulnerability
Critical
CVE-2022-37623
thlorenz browserify-shim vulnerable to prototype pollution
Critical
CVE-2022-37621
thlorenz browserify-shim vulnerable to prototype pollution
Critical
CVE-2022-29823
Feather-Sequelize cleanQuery method vulnerable to Prototype Pollution
Critical
CVE-2022-29822
feathers-sequelize vulnerable to SQL injection due to improper parameter filtering
Critical
CVE-2022-2422
feathers-sequelize contains improper input validation leading to SQL injection
Critical
CVE-2022-2421
Insufficient validation when decoding a Socket.IO packet
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.