High
CVE-2022-39251
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,481
Reset filters
High
CVE-2022-39249
matrix-js-sdk subject to impersonated messages due to permissive key forwarding
Medium
CVE-2022-39239
@netlify/ipx vulnerable to Full Response SSRF and Stored XSS via Cache Poisoning and Improper Host Validation
Low
CVE-2022-39231
parse-server auth adapter app ID validation can be circumvented
Medium
CVE-2022-39225
parse-server's session object properties can be updated by foreign user if object ID is known
High
CVE-2022-36079
Parse Server vulnerable to brute force guessing of user sensitive data via search patterns
Critical
CVE-2022-2900
Server-Side Request Forgery (SSRF) in GitHub repository ionicabizau/parse-url
Medium
CVE-2022-36046
Next.js is a React framework that can provide building blocks to create web applications. All of the following must be true to be affected by this CVE: Next.js version 12.2.3, Node.js version above v1
Medium
ghsa-v78c-4p63-2j6c
Cleartext Transmission of Sensitive Information in moment-timezone
High
CVE-2020-26938
oauth2-server through 3.1.1 vulnerable to Open Redirect
Critical
CVE-2022-36010
React Editable Json Tree vulnerable to arbitrary code execution via function parsing
Medium
CVE-2022-35949
`undici.request` vulnerable to SSRF using absolute URL on `pathname`
Medium
ghsa-2fvv-qxrq-7jq6
apollo-server-core vulnerable to URL-based XSS attack affecting IE11 on default landing page
High
CVE-2022-36313
file-type vulnerable to Infinite Loop via malformed MKV file
Medium
CVE-2022-25875
Svelte vulnerable to XSS when using objects during server-side rendering
High
CVE-2022-31112
Protected fields exposed via LiveQuery
High
CVE-2022-31127
Improper handling of email input
High
CVE-2022-31129
Moment.js vulnerable to Inefficient Regular Expression Complexity
Medium
CVE-2022-25876
Server-Side Request Forgery in link-preview-js
Critical
CVE-2022-2216
Server-Side Request Forgery in parse-url
Medium
CVE-2022-31110
Denial of Service (DoS) vulnerability in RSSHub
Medium
CVE-2022-23080
Server-Side Request Forgery in Directus
High
CVE-2022-31089
Invalid file request can crash server
High
CVE-2022-31083
Authentication bypass vulnerability in Apple Game Center auth adapter
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.