Medium
CVE-2022-35915
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 757
Reset filters
High
CVE-2022-31172
OpenZeppelin Contracts's SignatureChecker may revert on invalid EIP-1271 signers
High
CVE-2022-31170
OpenZeppelin Contracts's ERC165Checker may revert instead of returning false
Low
CVE-2021-43308
Regular expression denial of service in markdown-link-extractor
Medium
CVE-2020-24653
Expo on iOS is insecure due incorrect security attribute application
Critical
CVE-2018-21268
Node-Traceroute RCE Vulnerability
Medium
CVE-2020-11883
Diavante vue-storefront-api and storefront-api disclose stack trace
High
CVE-2022-24815
SQL Injection when creating an application with Reactive SQL backend
High
CVE-2022-1243
Incorrect protocol extraction via \r, \n and \t characters
Low
ghsa-7j52-6fjp-58gr
Inconsistent storage layout for ERC2771ContextUpgradeable
Critical
CVE-2021-23555
Sandbox bypass in vm2
Critical
CVE-2021-23484
Exposure of Resource to Wrong Sphere in Zip-Local
High
CVE-2022-21681
Inefficient Regular Expression Complexity in marked
High
CVE-2022-21680
Inefficient Regular Expression Complexity in marked
Medium
ghsa-m6w8-fq7v-ph4m
GovernorCompatibilityBravo incorrect ABI encoding may lead to unexpected behavior
Medium
CVE-2021-43843
jsx-slack insufficient patch for CVE-2021-43838 ReDoS
Low
CVE-2021-43838
Regular Expression Denial of Service (ReDoS) in jsx-slack
Medium
CVE-2021-46320
OpenZeppelin Contracts initializer reentrancy may lead to double initialization
Low
ghsa-wmpv-c2jp-j2xg
ERC1155Supply vulnerability in OpenZeppelin Contracts
Medium
CVE-2024-21910
Cross-site scripting vulnerability in TinyMCE plugins
Critical
CVE-2021-41264
UUPSUpgradeable vulnerability in @openzeppelin/contracts
Critical
ghsa-q4h9-46xg-m3x9
UUPSUpgradeable vulnerability in @openzeppelin/contracts-upgradeable
High
CVE-2021-37701
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links
High
CVE-2021-37712
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.