High
CVE-2022-40764
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
High
CVE-2022-21222
css-what vulnerable to ReDoS due to use of insecure regular expression
High
CVE-2022-24373
react-native-reanimated vulnerable to ReDoS
High
CVE-2022-40277
Joplin Remote Code Execution
Critical
CVE-2022-39266
isolated-vm has vulnerable CachedDataOptions in API
High
CVE-2022-39250
matrix-js-sdk subject to user impersonation due to key/device identifier confusion in SAS verification
Medium
CVE-2022-39263
Upstash Adapter missing token verification
High
CVE-2022-39251
matrix-js-sdk subject to user spoofing via Olm/Megolm protocol confusion
High
CVE-2022-39249
matrix-js-sdk subject to impersonated messages due to permissive key forwarding
Medium
CVE-2022-39236
Improper beacon events in matrix-js-sdk can result in availability issues
High
ghsa-36jr-mh4h-2g58
d3-color vulnerable to ReDoS
Critical
CVE-2022-36067
vm2 vulnerable to Sandbox Escape resulting in Remote Code Execution on host
High
CVE-2022-31367
Strapi mishandles hidden attributes within admin API responses
Medium
CVE-2022-21169
express-xss-sanitizer vulnerable to Prototype Pollution via allowedTags attribute
High
CVE-2020-36604
hoek subject to prototype pollution via the clone function.
High
CVE-2022-41340
secp256k1-js implements ECDSA without required r and s validation, leading to signature forgery
Medium
CVE-2022-23461
Jodit Editor vulnerable to Cross-site Scripting
Medium
CVE-2022-23458
Toast UI Grid vulnerable to Cross-site Scripting
Medium
CVE-2022-39239
@netlify/ipx vulnerable to Full Response SSRF and Stored XSS via Cache Poisoning and Improper Host Validation
Low
CVE-2022-39231
parse-server auth adapter app ID validation can be circumvented
Medium
CVE-2022-39230
fhir-works-on-aws-authz-smart handles permissions improperly
Medium
CVE-2022-39225
parse-server's session object properties can be updated by foreign user if object ID is known
Critical
CVE-2022-37265
steal vulnerable to Prototype Pollution via alias variable
High
CVE-2022-37259
steal Inefficient Regular Expression Complexity vulnerability via string variable
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.