Medium
CVE-2022-25869
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 564
Reset filters
Critical
CVE-2022-31180
Shescape vulnerable to insufficient escaping of whitespace
High
CVE-2020-1915
Out-of-bounds Read in Facebook Hermes
High
CVE-2020-1913
Signed to Unsigned Conversion Error in Facebook Hermes
High
CVE-2022-24434
Crash in HeaderParser in dicer
Medium
CVE-2018-11537
Auth0 angular-jwt misinterprets allowlist as regex
Critical
CVE-2018-6835
Etherpad Lite Access Restriction Bypass
Medium
CVE-2022-24725
Exposure of home directory through shescape on Unix with Bash
Medium
CVE-2022-0691
url-parse incorrectly parses hostname / protocol due to unstripped leading control characters.
Medium
CVE-2022-0122
Open Redirect in node-forge
Medium
CVE-2021-41174
XSS vulnerability allowing arbitrary JavaScript execution
High
ghsa-qm7x-rc44-rrqw
Cross-site Scripting Vulnerability in GraphQL Playground (distributed by Apollo Server)
High
CVE-2021-41249
XSS vulnerability in GraphQL Playground from untrusted schemas
High
CVE-2021-41248
GraphiQL introspection schema template injection attack
High
CVE-2021-37712
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links
Medium
CVE-2021-32796
Misinterpretation of malicious XML input
Critical
CVE-2020-27664
Authorization bypass in Strapi
Medium
CVE-2021-27515
Path traversal in url-parse
Medium
CVE-2021-21366
Misinterpretation of malicious XML input
Critical
ghsa-xfrc-7mj2-5xh9
Undefined Behavior in zencashjs
Medium
CVE-2012-6708
Cross-Site Scripting in jquery
High
CVE-2014-3744
Directory Traversal in st
Low
CVE-2015-1164
Open Redirect in serve-static
High
CVE-2013-3364
Unauthenticated Remote Command Injection in ep_imageconvert
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.