Medium
CVE-2022-24723
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
High
ghsa-v3wr-67px-44xg
Execution with Unnecessary Privileges in arc-electron
Medium
CVE-2022-0776
Cross site scripting in reveal.js
Medium
CVE-2022-24717
Cross Site Scripting (XSS) in @finastra/ssr-pages
High
CVE-2022-24718
Path Traversal in @finastra/ssr-pages
Medium
CVE-2022-0764
Command injection in strapi
Medium
CVE-2021-37504
jQuery-Upload-File XSS in fileNameStr
Medium
CVE-2021-23495
Open redirect in karma
High
CVE-2022-24709
Cross site scripting in @awsui/components-react
High
CVE-2022-0654
Cookie exposure in requestretry
High
CVE-2022-23647
Cross-site Scripting in Prism
Medium
CVE-2022-0691
url-parse incorrectly parses hostname / protocol due to unstripped leading control characters.
Critical
CVE-2022-0686
Authorization Bypass Through User-Controlled Key in url-parse
Critical
CVE-2021-23702
Prototype Pollution in object-extend
Medium
CVE-2022-0639
url-parse Incorrectly parses URLs that include an '@'
Critical
CVE-2022-22912
Prototype pollution in Plist before 3.0.5 can cause denial of service
Medium
CVE-2022-23646
Improper CSP in Image Optimization API for Next.js versions between 10.0.0 and 12.1.0
Medium
CVE-2022-0613
Authorization Bypass Through User-Controlled Key in urijs
Critical
CVE-2021-23682
Prototype Pollution in litespeed.js and appwrite/server-ce
Medium
CVE-2022-0512
Authorization bypass in url-parse
Critical
CVE-2021-23555
Sandbox bypass in vm2
High
CVE-2021-23597
Uncaught Exception in fastify-multipart
Critical
CVE-2021-23383
Prototype Pollution in handlebars
High
CVE-2021-26543
Command injection in git-parse
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.