High
CVE-2020-36629
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
High
CVE-2022-46175
json5 <= 1.0.1 and 2.0.0-2.2.1 - Prototype Pollution
Medium
CVE-2022-25948
liquidjs may leak properties of a prototype
Medium
CVE-2022-23541
jsonwebtoken's insecure implementation of key retrieval function could lead to Forgeable Public/Private Tokens from RSA to HMAC
Medium
CVE-2022-23540
jsonwebtoken vulnerable to signature validation bypass due to insecure default algorithm in jwt.verify()
High
CVE-2022-23539
jsonwebtoken unrestricted key type could lead to legacy keys usage
High
CVE-2021-4264
dustjs-linkedin vulnerable to Prototype Pollution
High
CVE-2022-24431
abacus-ext-cmdline vulnerable to Command Injection
Medium
CVE-2022-25929
Smoothie vulnerable to Cross-site Scripting when tooltipLabel or strokeStyle are controlled by users
High
CVE-2022-25895
lite-dev-server vulnerable to Directory Traversal
Critical
CVE-2022-25893
vm2 vulnerable to Arbitrary Code Execution
High
CVE-2022-25940
lite-server vulnerable to Denial of Service
Critical
CVE-2022-25904
safe-eval vulnerable to Prototype Pollution
High
CVE-2022-25171
p4 vulnerable to Command Injection due to improper input sanitization
High
CVE-2022-25931
easy-static-server vulnerable to Directory Traversal
Medium
CVE-2021-4260
Oils JS vulnerable to Open Redirect
Critical
CVE-2020-36618
FurqanSoftware/node-whois vulnerable to Prototype Pollution
High
CVE-2016-20018
Knex.js has a limited SQL injection vulnerability
Critical
CVE-2021-4245
npm package rfc6902 vulnerable to Prototype Pollution
Critical
CVE-2021-33420
replicator vulnerable to Deserialization of Untrusted Data
Medium
CVE-2020-24855
easywebpack-cli Path Traversal vulnerability
Critical
CVE-2022-24377
cycle-import-check vulnerable to Command Injection
Medium
CVE-2022-23505
Authentication Bypass for passport-wsfed-saml2
High
CVE-2022-23510
@cubejs-backend/api-gateway row level security bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.