Low
ghsa-5rrq-pxf6-6jx5
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Low
ghsa-wxgw-qj99-44c2
Prototype Pollution in node-forge util.setPath API
Low
ghsa-gf8q-jrpm-jvxq
URL parsing in node-forge could lead to undesired behavior.
High
CVE-2021-22569
A potential Denial of Service issue in protobuf-java
Medium
CVE-2021-23382
Regular Expression Denial of Service in postcss
Critical
CVE-2020-7631
OS Command Injection in diskusage-ng
Medium
CVE-2020-11529
Open Redirect in Grav
Critical
CVE-2020-7632
OS Command Injection in node-mpv
Medium
CVE-2021-43678
Wechat-php-sdk is affected by a Cross Site Scripting vulnerability.
Critical
CVE-2021-25114
Paid Memberships Pro <= 2.6.6 - Unauthenticated SQL Injection
High
CVE-2021-41561
Improper Input Validation in Parquet-MR
High
CVE-2021-4118
pytorch-lightning is vulnerable to Deserialization of Untrusted Data
Critical
CVE-2021-42392
RCE in H2 Console
High
CVE-2022-51017
Uncapped length of skin data fields submitted by players
Medium
CVE-2022-51018
Book page text, count, and author/title length is not limited in PocketMine-MP
Medium
CVE-2022-21651
Open redirect in shopware
Low
CVE-2022-21652
Insufficient Session Expiration in shopware
Medium
CVE-2022-21653
Hash collision in typelevel jawn
High
CVE-2022-21648
Sandbox bypass in Latte templates
High
CVE-2020-19316
OS Command Injection in Laravel Framework
High
CVE-2022-21647
Deserialization of Untrusted Data in Codeigniter4
Low
CVE-2021-43862
jquery.terminal self XSS on user input
High
CVE-2022-0086
uppy's companion module is vulnerable to Server-Side Request Forgery (SSRF)
High
CVE-2021-34797
Insertion of Sensitive Information into Log File in Apache Geode
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.