Critical
CVE-2020-7635
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
Medium
CVE-2021-41246
Session fixation in express-openid-connect
Medium
ghsa-qrmm-w75w-3wpx
Server side request forgery in SwaggerUI
Critical
CVE-2021-44685
Command injection in git-it-electron
High
CVE-2021-43803
Unexpected server crash in Next.js.
Medium
CVE-2021-23673
Cross-site Scripting in pekeupload
Medium
CVE-2021-23718
Server-Side Request Forgery in ssrf-agent
High
CVE-2021-43776
Cross-Site Scripting vulnerability in @backstage/plugin-auth-backend
High
ghsa-2g8g-63j4-9w3r
RCE vulnerability affecting v1beta3 templates in @backstage/plugin-scaffolder-backend
High
CVE-2021-43785
Cross-Site Scripting Vulnerability in @joeattardi/emoji-button
High
CVE-2021-43783
Path Traversal in @backstage/plugin-scaffolder-backend
Medium
CVE-2021-25987
Hexo Vulnerable to XSS
Critical
CVE-2021-43786
API token verification can be bypassed in NodeBB
Critical
CVE-2021-43787
XSS via prototype pollution in NodeBB
Medium
CVE-2021-43788
NodeBB vulnerable to path traversal in translator module
High
CVE-2021-40830
Improper certificate management in AWS IoT Device SDK v2
High
CVE-2021-40829
Improper certificate management in AWS IoT Device SDK v2
Medium
CVE-2021-40828
Improper certificate management in AWS IoT Device SDK v2
High
CVE-2021-40831
Improper certificate management in AWS IoT Device SDK v2
Critical
CVE-2021-23433
Prototype Pollution in algoliasearch-helper
High
CVE-2020-21176
SQL Injection in thinkjs
Critical
CVE-2021-3918
json-schema is vulnerable to Prototype Pollution
Medium
ghsa-xx4c-jj58-r7x6
Inefficient Regular Expression Complexity in Validator.js
High
CVE-2021-41165
HTML comments vulnerability allowing to execute JavaScript code
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.