High
CVE-2023-46942
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
Critical
CVE-2024-22206
@clerk/nextjs auth() and getAuth() methods vulnerable to insecure direct object reference (IDOR)
Medium
CVE-2024-21668
react-native-mmkv Insertion of Sensitive Information into Log File vulnerability
Medium
CVE-2023-50974
In Appwrite CLI before 3.0.0, when using the login command, the credentials of the Appwrite user are stored in a ~/.appwrite/prefs.json file with 0644 as UNIX permissions. Any user of the local system
Medium
CVE-2023-51701
@fastify/reply-from JSON Content-Type parsing confusion
High
CVE-2023-6944
@backstage/backend-app-api leaks GitLab access tokens
Critical
CVE-2023-7080
Arbitrary remote code execution within `wrangler dev` Workers sandbox
Medium
CVE-2023-7079
Arbitrary remote file read in Wrangler dev server
High
CVE-2023-39655
CouchAuth host header injection vulnerability leaks the password reset token
Critical
CVE-2023-46308
plotly.js prototype pollution vulnerability
Medium
CVE-2023-26159
Follow Redirects improperly handles URLs in the url.parse() function
Medium
CVE-2023-50550
Layui cross-site scripting (XSS) vulnerability
High
CVE-2023-7078
Miniflare vulnerable to Server-Side Request Forgery (SSRF)
High
CVE-2023-52079
msgpackr's conversion of property names to strings can trigger infinite recursion
Medium
CVE-2023-50481
blinksocks has weak encryption algorithms
Critical
CVE-2023-50475
bsock uses weak hashing algorithms
Critical
CVE-2019-25158
Pedroetb TTS-API OS Command Injection
High
CVE-2023-50249
Sentry's Astro SDK vulnerable to ReDoS
High
CVE-2023-50728
Unauthenticated Denial of Service in the octokit/webhooks library
Critical
ghsa-cfxh-frx4-9gjg
Cross-site Scripting in @spscommerce/ds-react
Medium
CVE-2023-50710
Named path parameters can be overridden in TrieRouter
Medium
CVE-2023-50709
Cube API denial of service attack
Critical
CVE-2023-49583
Escalation of privileges in @sap/xssec
Medium
CVE-2023-49804
Password Change Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.