Medium
CVE-2021-37916
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
Medium
CVE-2021-36383
Xen Orchestra Mishandles Authorization
Critical
CVE-2021-24037
Use After Free in Hermes
Critical
CVE-2021-25944
deep-defaults vulnerable to prototype pollution
High
CVE-2021-28458
Improper Privilege Management in Azure ms-rest-nodeauth
Medium
CVE-2021-30074
Docsify vulnerable to cross-site scripting due to mishandled encoding
Critical
CVE-2021-25915
Changeset vulnerable to prototype pollution
Critical
CVE-2021-26700
Remote code execution in vscode-npm-script
Medium
CVE-2021-26271
CKEditor 4 ReDoS Vulnerability
Medium
CVE-2020-26768
Formstone Vulnerable to Reflected XSS
Critical
CVE-2020-28277
dset vulnerable to prototype pollution
Critical
CVE-2020-28276
Prototype pollution vulnerability in 'deep-set'
Critical
CVE-2020-28279
flattenizer vulnerable to prototype pollution
Critical
CVE-2020-28278
shvl vulnerable to prototype pollution
Critical
CVE-2020-28272
keyget vulnerable to prototype pollution
High
CVE-2020-28267
Prototype pollution in @strikeentco/set
Medium
CVE-2020-27193
Improper Neutralization of Input During Web Page Generation in CKEditor4
High
CVE-2020-1915
Out-of-bounds Read in Facebook Hermes
Critical
CVE-2020-1914
Always-Incorrect Control Flow Implementation in Facebook Hermes
High
CVE-2020-1913
Signed to Unsigned Conversion Error in Facebook Hermes
High
CVE-2020-1912
Out-of-bounds Read and Out-of-bounds Write in Facebook Hermes
Critical
CVE-2020-1911
Access of Resource Using Incompatible Type in Facebook Hermes
Medium
CVE-2020-24653
Expo on iOS is insecure due incorrect security attribute application
Critical
CVE-2020-7704
linux-cmdline is vulnerable to Prototype Pollution via the constructor
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.