High
CVE-2014-10066
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,493
Reset filters
Medium
CVE-2017-18635
Cross-Site Scripting in @novnc/novnc
Critical
ghsa-r587-7jh2-4qr3
Server secret was included in static assets and served to clients
Critical
CVE-2020-15152
Server-Side Request Forgery in ftp-srv
High
CVE-2020-8205
Server-Side Request Forgery in @uppy/companion
Medium
CVE-2020-15135
CSRF vulnerability in save-server
High
CVE-2020-7686
Directory traversal in rollup-plugin-server
High
CVE-2020-7683
Directory traversal in rollup-plugin-server
Medium
ghsa-wvh7-5p38-2qfc
Storing Password in Local Storage
Medium
CVE-2020-15126
GraphQL: Security breach on Viewer query
High
CVE-2020-15092
TimelineJS3 < 3.7.0 - Stored Cross-Site Scripting
High
CVE-2020-15779
Path Traversal in socket.io-file
Medium
ghsa-g753-jx37-7xwh
ECDSA signature vulnerability of Minerva timing attack in jsrsasign
High
CVE-2020-4045
Information disclosure in SSB-DB
Medium
ghsa-w42g-7vfc-xf37
Introspection in schema validation in Apollo Server
High
CVE-2020-7662
Regular Expression Denial of Service in websocket-extensions (NPM package)
Critical
CVE-2020-6836
Command Injection in hot-formula-parser
Medium
ghsa-pc5p-h8pf-mvwp
Machine-In-The-Middle in https-proxy-agent
High
CVE-2019-15600
Cross-Site Scripting in http_server
Medium
CVE-2019-15596
Path Traversal in statics-server
Medium
CVE-2020-5284
Directory Traversal in Next.js
High
CVE-2020-5251
Information disclosure in parse-server
Medium
CVE-2020-5243
Denial of Service in uap-core when processing crafted User-Agent strings
Critical
CVE-2019-15597
Command Injection in node-df
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.