Medium
CVE-2022-31069
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
Medium
ghsa-7v28-g2pq-ggg8
Ghost vulnerable to remote code execution in locale setting change
Medium
ghsa-4jqc-jvh2-pxg9
Path traversal for local publishers in TechDocs backend
High
CVE-2022-32210
ProxyAgent vulnerable to MITM
Medium
CVE-2021-33295
Joplin Cross Site Scripting Vulnerability via NOSCRIPT tags
Medium
CVE-2022-29257
AutoUpdater module fails to validate certain nested components of the bundle
Low
CVE-2022-29247
Compromised child renderer processes could obtain IPC access without nodeIntegrationInSubFrames being enabled
Medium
CVE-2022-2079
Cross-site Scripting in NocoDB
Medium
CVE-2022-29894
Cross-site Scripting in Strapi
High
CVE-2022-2064
Insufficient Session Expiration in NocoDB
High
CVE-2022-2063
Improper Privilege Management in NocoDB
High
CVE-2022-2062
NocoDB information disclosure vulnerability
High
CVE-2022-24278
Directory traversal in convert-svg-core
High
CVE-2022-24376
OS Command Injection in git-promise
High
CVE-2022-24429
Code injection via SVG file in convert-svg-core
High
CVE-2022-25851
Infinite loop in jpeg-js
High
CVE-2022-21211
Unhandled crash in npm posix
Critical
CVE-2022-31830
Server-Side Request Forgery in kityminder
Medium
CVE-2022-31051
Exposure of Sensitive Information to an Unauthorized Actor in semantic-release
Critical
CVE-2022-21122
Code Injection in metacalc
High
CVE-2022-25863
Unsanitized JavaScript code injection possible in gatsby-plugin-mdx
High
CVE-2022-1929
Regular expression denial of service in devcert
Low
CVE-2021-43308
Regular expression denial of service in markdown-link-extractor
Low
CVE-2021-43306
Regular expression denial of service in jquery-validation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.