Medium
CVE-2022-23494
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
High
CVE-2022-23487
libp2p DoS vulnerability from lack of resource management
Critical
CVE-2022-46164
NodeBB vulnerable to account takeover via prototype vulnerability
High
CVE-2022-41957
muhammara and hummus vulnerable to Unchecked Return Value to NULL Pointer Dereference
Critical
CVE-2022-42496
nadesiko3 vulnerable to OS Command Injection
Medium
CVE-2022-41777
nadesiko3 allows remote attacker to inject invalid value to decodeURIComponent of nako3edit
Critical
CVE-2022-41642
Nadesiko3 OS Command Injection vulnerability
Critical
CVE-2022-25912
simple-git < 3.15.0 - Remote Code Execution
Medium
CVE-2022-22984
Snyk plugins vulnerable to Command Injection
High
CVE-2022-25848
static-dev-server vulnerable to path traversal
High
CVE-2022-41654
ghost vulnerable to unauthorized newsletter modification via improper access controls
High
CVE-2022-38900
decode-uri-component <= 0.2.1 - Denial of Service
High
CVE-2022-24999
qs vulnerable to Prototype Pollution
Critical
Exploited in attacks
CVE-2022-4135
Heap buffer overflow in GPU
Low
ghsa-8jh9-wqpf-q52c
sweetalert2 v8.19.1 and above contains hidden functionality
Low
ghsa-pg98-6v7f-2xfv
sweetalert2 v9.17.4 and above contains hidden functionality
Low
ghsa-457r-cqc8-9vj9
sweetalert2 v10.16.10 and above contains hidden functionality
Low
ghsa-qq6h-5g6j-q3cm
sweetalert2 v11.4.9 and above contains hidden functionality
Medium
CVE-2022-4111
ToolJet is vulnerable to Denial of Service (DoS)
Medium
CVE-2022-41940
Uncaught exception in engine.io
Medium
CVE-2022-41919
Fastify: Incorrect Content-Type parsing can lead to CSRF attack
Medium
CVE-2022-3978
NodeBB vulnerable to Cross-Site Request Forgery
Medium
CVE-2022-3971
Matrix-appservice-irc vulnerable to sql injection via roomIds argument
Medium
ghsa-98pf-gfh3-x3mp
Read the Docs vulnerable to Cross-Site Scripting (XSS)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.