Critical
CVE-2023-1283
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,491
Reset filters
High
CVE-2023-26111
node-static and @nubosoftware/node-static vulnerable to Directory Traversal
Medium
CVE-2023-26492
Directus vulnerable to Server-Side Request Forgery On File Import
Medium
CVE-2023-26487
Vega has Cross-site Scripting vulnerability in `lassoAppend` function
High
CVE-2023-26104
Denial of Service vulnerability in lite-web-server
Medium
CVE-2016-15025
generator-hottowel Cross-site Scripting vulnerability
Medium
CVE-2025-27098
Unwanted access to the entire file system vulnerability due to a missing check in `staticFiles` HTTP handler
Medium
CVE-2023-25572
Cross-Site-Scripting attack on `<RichTextField>`
High
CVE-2023-22474
Parse Server option `masterKeyIps` vulnerability to IP spoofing
High
CVE-2022-21192
Directory Traversal vulnerability in serve-lite
Medium
CVE-2022-25847
Cross-site Scripting (XSS) in serve-lite
High
CVE-2020-36651
Path Traversal in web-node-server
Medium
ghsa-crhg-xgrg-vvcc
a12nserver vulnerable to potential SQL Injections via Knex dependency
High
CVE-2023-22493
RSSHub SSRF vulnerability
High
CVE-2023-22491
gatsby-transformer-remark has possible unsanitized JavaScript code injection
High
CVE-2023-0163
convict vulnerable to Prototype Pollution
Medium
CVE-2022-3145
@okta/oidc-middlewareOpen Redirect vulnerability
High
CVE-2020-36629
SimbCo httpster vulnerable to Path Traversal
High
CVE-2022-25895
lite-dev-server vulnerable to Directory Traversal
High
CVE-2022-25940
lite-server vulnerable to Denial of Service
High
CVE-2022-25931
easy-static-server vulnerable to Directory Traversal
Medium
CVE-2022-41777
nadesiko3 allows remote attacker to inject invalid value to decodeURIComponent of nako3edit
High
CVE-2022-25848
static-dev-server vulnerable to path traversal
Medium
CVE-2022-41940
Uncaught exception in engine.io
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.