Critical
CVE-2022-25759
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 5,032
Reset filters
High
CVE-2022-31172
OpenZeppelin Contracts's SignatureChecker may revert on invalid EIP-1271 signers
High
CVE-2022-31170
OpenZeppelin Contracts's ERC165Checker may revert instead of returning false
Low
CVE-2022-31151
undici before v5.8.0 vulnerable to uncleared cookies on cross-host / cross-origin redirect
Critical
CVE-2020-28471
Properties-Reader before v2.2.0 vulnerable to prototype pollution
High
CVE-2022-36127
Apache SkyWalking NodeJS Agent can lose availability if header includes illegal SkyWalking header
Medium
CVE-2022-31160
jQuery UI vulnerable to XSS when refreshing a checkboxradio with an HTML-like initial text label
Medium
CVE-2022-25869
Angular (deprecated package) Cross-site Scripting
High
CVE-2022-31142
fastify-bearer-auth vulnerable to Timing Attack Vector
Critical
CVE-2022-32213
llhttp allows HTTP Request Smuggling via Flawed Parsing of Transfer-Encoding
High
CVE-2019-10761
vm2 before 3.6.11 vulnerable to sandbox escape
Medium
CVE-2022-32114
Strapi 4.1.12 Cross-site Scripting via crafted file
High
CVE-2022-31127
Improper handling of email input
High
CVE-2022-31129
Moment.js vulnerable to Inefficient Regular Expression Complexity
Medium
CVE-2022-31108
Possible inject arbitrary `CSS` into the generated graph affecting the container HTML
High
CVE-2022-31103
Improper handling of CSS at-rules in lettersanitizer
Medium
CVE-2022-31110
Denial of Service (DoS) vulnerability in RSSHub
High
CVE-2022-31093
Improper Handling of `callbackUrl` parameter in next-auth
High
CVE-2022-31089
Invalid file request can crash server
High
CVE-2022-25852
pg-native and libpq vulnerable to uncontrolled resource consumption
High
CVE-2022-31083
Authentication bypass vulnerability in Apple Game Center auth adapter
Medium
CVE-2022-31070
Potential Sensitive Cookie Exposure in NPM Packages @finastra/nestjs-proxy, @ffdc/nestjs-proxy
Medium
CVE-2022-31069
Potential Authorization Header Exposure in NPM Packages @finastra/nestjs-proxy, @ffdc/nestjs-proxy
Medium
ghsa-7v28-g2pq-ggg8
Ghost vulnerable to remote code execution in locale setting change
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.