Medium
CVE-2018-3726
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,499
Reset filters
Medium
CVE-2018-3809
Information Exposure on Case Insensitive File Systems in serve
Critical
CVE-2017-16088
Sandbox Breakout in safe-eval
Critical
CVE-2017-16100
Command Injection in dns-sync
Critical
CVE-2017-5941
Code Execution through IIFE in node-serialize
Critical
CVE-2017-5954
Code Execution Through IIFE in serialize-to-js
Critical
ghsa-hxxf-q3w9-4xgw
Malicious Package in eslint-scope
Critical
CVE-2017-16042
Growl before 1.10.0 vulnerable to Command Injection
Medium
CVE-2015-9236
Incorrect handling of CORS preflight request headers in hapi
High
CVE-2015-9240
Authentication Weakness in keystone
High
CVE-2015-9241
Denial of Service in hapi
High
CVE-2015-9242
Denial of Service in ecstatic
Critical
CVE-2016-10548
Arbitrary Code Injection in reduce-css-calc
Critical
CVE-2018-3746
Command Injection in pdfinfojs
Medium
CVE-2018-11093
Cross-Site Scripting in @ckeditor/ckeditor5-link
High
CVE-2018-3728
Prototype Pollution in hoek
Medium
CVE-2018-1000160
Cross-Site Scripting in @risingstack/protect
Medium
CVE-2018-9861
Enhanced Image plugin for CKEditor is vulnerable to Cross-site scripting (XSS)
High
CVE-2018-1000118
Electron protocol handler browser vulnerable to Command Injection
High
CVE-2018-1000136
Electron Vulnerable to Code Execution by Re-Enabling Node.js Integration
High
CVE-2018-1000096
tiny-json-http missing SSL certificate validation
High
CVE-2018-1000086
pym.js CSRF Vulnerability
High
CVE-2018-7307
Auth0-js bypasses CSRF checks
Medium
CVE-2018-7651
Regular Expression Denial of Service in ssri
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.