Medium
CVE-2023-25571
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
Medium
CVE-2023-25572
Cross-Site-Scripting attack on `<RichTextField>`
Medium
CVE-2022-25937
Path traversal vulnerability in glance
High
CVE-2019-25102
Regular Expression Denial of Service in simple-markdown
High
CVE-2019-25103
Regular Expression Denial of Service in simple-markdown
Medium
CVE-2023-25166
@sideway/formula contains Regular Expression Denial of Service (ReDoS) Vulnerability
High
CVE-2023-25164
Sensitive Information leak via Script File in TinaCMS
High
CVE-2022-25855
create-choo-app3 is vulnerable to Command Injection via the devInstall function
High
CVE-2022-25853
semver-tags is vulnerable to Command Injection via the getGitTagsRemote function
High
CVE-2018-25079
is-url Inefficient Regular Expression Complexity vulnerability
Medium
CVE-2023-23636
Jellyfin Web Cross-Site Scripting (XSS) via Playlist Name
Medium
CVE-2023-23635
Jellyfin Web Cross-Site Scripting (XSS) via Collection Name
High
CVE-2023-23925
Switcher Client contains Regular Expression Denial of Service (ReDoS)
High
CVE-2022-25916
mt7688-wiscan is vulnerable to Command Injection due to improper input sanitization
High
CVE-2022-25906
is-http2 vulnerable to Improper Input Validation
High
CVE-2023-23630
XSS Attack with Express API
High
CVE-2023-22474
Parse Server option `masterKeyIps` vulnerability to IP spoofing
Medium
CVE-2022-45598
Joplin Desktop App vulnerable to Cross-site Scripting
Medium
CVE-2022-25881
http-cache-semantics < 4.1.1 - Regular Expression Denial of Service (ReDoS)
Critical
CVE-2022-21129
nemo-appium vulnerable to OS Command Injection
Medium
CVE-2022-25979
jSuites subect to Cross-site Scripting
High
CVE-2022-25936
Servst vulnerable to Path Traversal
High
CVE-2022-25967
Eta vulnerable to Code Injection via templates rendered with user-defined data
Medium
CVE-2022-48285
JSZip contains Path Traversal via loadAsync
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.