Medium
ghsa-8mgq-6r2q-82w9
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
Medium
CVE-2022-36046
Next.js is a React framework that can provide building blocks to create web applications. All of the following must be true to be affected by this CVE: Next.js version 12.2.3, Node.js version above v1
Critical
CVE-2022-36045
Cryptographically weak PRNG in `utils.generateUUID`
Low
ghsa-56x4-j7p9-fcf9
Command Injection in moment-timezone
Medium
ghsa-v78c-4p63-2j6c
Cleartext Transmission of Sensitive Information in moment-timezone
Medium
CVE-2022-36031
Directus vulnerable to unhandled exception on illegal filename_disk value
High
CVE-2020-26938
oauth2-server through 3.1.1 vulnerable to Open Redirect
Critical
CVE-2022-25921
morgan-json vulnerable to Arbitrary Code Execution
Critical
CVE-2022-25644
@pendo324/get-process-by-name are vulnerable to Arbitrary Code Execution
Critical
CVE-2022-21165
Font-Converter Vulnerable to Arbitrary Command Injection
Critical
CVE-2022-24304
Mongoose Vulnerable to Prototype Pollution in Schema Object
High
CVE-2022-24375
node-opcua DoS when bypassing limitations for excessive memory consumption
Medium
CVE-2021-43309
uri-template-lite Regular Expression Denial of Service
High
CVE-2022-25231
node-opcua DoS vulnerability via message with memory allocation that exceeds v8's memory limit
High
CVE-2022-21208
Uncontrolled Resource Consumption in node-opcua
Medium
CVE-2022-2932
Cross site scripting in mobiledoc-kit
High
CVE-2022-35204
Vite before v2.9.13 vulnerable to directory traversal via crafted URL to victim's service
Critical
CVE-2022-36010
React Editable Json Tree vulnerable to arbitrary code execution via function parsing
Medium
CVE-2022-35948
Nodejs ‘undici’ vulnerable to CRLF Injection via Content-Type
Medium
CVE-2022-35954
@actions/core has Delimiter Injection Vulnerability in exportVariable
High
CVE-2022-35961
OpenZeppelin Contracts vulnerable to ECDSA signature malleability
Medium
CVE-2022-35949
`undici.request` vulnerable to SSRF using absolute URL on `pathname`
Medium
ghsa-2fvv-qxrq-7jq6
apollo-server-core vulnerable to URL-based XSS attack affecting IE11 on default landing page
High
CVE-2022-31198
OpenZeppelin Contracts's GovernorVotesQuorumFraction updates to quorum may affect past defeated proposals
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.