Medium
CVE-2022-27103
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
Critical
CVE-2022-29078
ejs template injection vulnerability
Critical
CVE-2022-1440
Command injection in git-interface
Medium
CVE-2022-24858
NextAuth.js default redirect callback vulnerable to open redirects
High
CVE-2022-22143
Prototype Pollution in convict
High
CVE-2022-24279
Prototype Pollution in madlib-object-utils
Critical
CVE-2022-29080
Command injection in npm-dependency-versions
High
CVE-2022-21803
Prototype Pollution in nconf
Critical
CVE-2022-27263
Unrestricted Upload of File with Dangerous Type in Strapi
Critical
CVE-2022-27139
Arbitrary file upload in Ghost
High
CVE-2022-27261
Express-FileUpload Arbitrary File Overwrite
Critical
CVE-2022-27260
Unrestricted Upload of File with Dangerous Type in ButterCMS
Critical
CVE-2022-28397
Arbitrary file upload in Ghost
Critical
CVE-2022-27952
Unrestricted Upload of File with Dangerous Type in Payload
Medium
CVE-2022-0436
Path Traversal in Grunt
Medium
CVE-2022-1330
Cross-site Scripting in fullpage.js
High
CVE-2022-1295
Prototype Pollution in fullpage.js
Medium
CVE-2022-1291
Cross-site Scripting in tableexport.jquery.plugin
High
CVE-2022-24822
Denial of Service vulnerability in @podium/layout and @podium/proxy
High
CVE-2022-24815
SQL Injection when creating an application with Reactive SQL backend
High
CVE-2021-43138
async <= 2.6.3 and 3-3.2.2 - Prototype Pollution
High
CVE-2022-1243
Incorrect protocol extraction via \r, \n and \t characters
Medium
CVE-2020-28847
Cross site scripting in valine
Critical
CVE-2022-26969
Insecure default value for CORS configuration
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.