High
CVE-2022-39218
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
Critical
CVE-2022-38545
Valine code injection vulnerability
Medium
CVE-2022-25873
Vuetify Cross-site Scripting vulnerability
Medium
CVE-2022-3225
Budibase Improper Control of Dynamically-Managed Code Resources vulnerability
Critical
CVE-2022-37258
steal vulnerable to Prototype Pollution
High
CVE-2022-36079
Parse Server vulnerable to brute force guessing of user sensitive data via search patterns
High
CVE-2022-36076
NodeBB account takeover via SSO plugins
Medium
CVE-2022-36083
JOSE vulnerable to resource exhaustion via specifically crafted JWE
Critical
CVE-2022-36084
cruddl vulnerable to ArangoDB Query Language (AQL) injection through flexSearch
Critical
CVE-2022-37266
steal vulnerable to Prototype Pollution via key variable in babel.js
Critical
CVE-2022-37257
steal vulnerable to Prototype Pollution via requestedVersion variable
Medium
CVE-2022-3224
parse-url parses http URLs incorrectly, making it vulnerable to host name spoofing
Critical
CVE-2022-37264
steal vulnerable to Prototype Pollution via optionName variable
High
CVE-2022-37262
steal vulnerable to Regular Expression Denial of Service via source and sourceWithComments
High
CVE-2022-37260
steal vulnerable to Regular Expression Denial of Service via input variable
Medium
CVE-2022-39202
matrix-appservice-irc vulnerable to IRC mode parameter confusion
High
CVE-2022-39203
Parsing issue in matrix-org/node-irc leading to room takeovers
Critical
CVE-2022-2900
Server-Side Request Forgery (SSRF) in GitHub repository ionicabizau/parse-url
Medium
CVE-2022-38639
Markdown-Nice v1.8.22 vulnerable to Cross-site Scripting
High
CVE-2022-35513
Blink1Control2 uses weak password encryption
Low
CVE-2022-36036
Improper Control of Generation of Code ('Code Injection') in mdx-mermaid
High
CVE-2022-36034
Polynomial regular expression used on uncontrolled data in nitrado.js
High
CVE-2022-25887
Sanitize-html Vulnerable To REDoS Attacks
Medium
CVE-2022-25646
x-data-spreadsheet through 1.1.9 vulnerable to Cross-site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.