Medium
CVE-2023-30541
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
Medium
CVE-2023-29529
matrix-js-sdk vulnerable to invisible eavesdropping in group calls
Critical
CVE-2023-29199
vm2 Sandbox Escape vulnerability
Critical
CVE-2023-26122
safe-eval vulnerable to Sandbox Bypass due to improper input sanitization
Critical
CVE-2023-26121
safe-eval vulnerable to Prototype Pollution via the safeEval function
Critical
CVE-2023-29017
vm2 vulnerable to sandbox escape
High
CVE-2023-29008
SvelteKit framework has Insufficient CSRF protection for CORS requests
Medium
CVE-2023-0842
xml2js is vulnerable to prototype pollution
High
CVE-2023-0835
markdown-pdf vulnerable to local file read via server side cross-site scripting (XSS)
High
CVE-2023-29003
SvelteKit vulnerable to Cross-Site Request Forgery
Medium
CVE-2020-19697
Pandao Editor.md vulnerable to cross-site scripting (XSS) in iframe src parameter
Medium
CVE-2020-19698
Pandao Editor.md vulnerable to cross-site scripting (XSS) in editor parameter
Medium
CVE-2020-19850
Directus API vulnerable to denial of service
High
CVE-2023-28427
Prototype pollution in matrix-js-sdk (part 2)
Medium
CVE-2023-26117
angular vulnerable to regular expression denial of service via the $resource service
Medium
CVE-2023-26116
angular vulnerable to regular expression denial of service via the angular.copy() utility
Medium
CVE-2023-26118
angular vulnerable to regular expression denial of service via the <input type="url"> element
High
CVE-2023-28103
Prototype pollution in matrix-react-sdk
High
CVE-2022-36060
matrix-react-sdk Prototype pollution vulnerability
High
CVE-2022-36059
matrix-js-sdk Prototype Pollution vulnerability
Critical
CVE-2023-28444
angular-server-side-configuration information disclosure vulnerability in monorepo with node.js backend
Medium
CVE-2023-28443
directus vulnerable to Insertion of Sensitive Information into Log File
Critical
CVE-2023-26114
code-server vulnerable to Missing Origin Validation in WebSockets
High
CVE-2023-26113
Collection.js vulnerable to Prototype Pollution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.