Medium
CVE-2022-24740
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,476
Reset filters
Critical
CVE-2022-24760
Command injection in Parse Server through prototype pollution
High
CVE-2022-0528
Incorrect Authorization in @uppy/companion
High
CVE-2022-23647
Cross-site Scripting in Prism
Critical
CVE-2021-23682
Prototype Pollution in litespeed.js and appwrite/server-ce
Medium
CVE-2021-23384
Open Redirect in koa-remove-trailing-slashes
High
CVE-2019-20920
Arbitrary Code Execution in Handlebars
Critical
CVE-2022-23631
Prototype Pollution leading to Remote Code Execution in superjson
Medium
CVE-2022-0508
Server-Side Request Forgery in @peertube/embed-api
Medium
CVE-2022-21721
Denial of Service Vulnerability in next.js
High
CVE-2021-23664
Server side request forgery in @isomorphic-git/cors-proxy
High
CVE-2022-21676
Uncaught Exception in engine.io
Medium
CVE-2022-21671
Potential exposure of tokens to an Unauthorized Actor
Critical
ghsa-2w8g-m5j8-7m87
Zalgo-like output that crashes the server
High
CVE-2022-21667
Denial of Service in soketi
High
CVE-2022-0086
uppy's companion module is vulnerable to Server-Side Request Forgery (SSRF)
High
CVE-2020-1026
Incorrect Calculation in the MSR JavaScript Cryptography Library
High
CVE-2021-23797
Path Traversal in http-server-node
Medium
ghsa-qrmm-w75w-3wpx
Server side request forgery in SwaggerUI
High
CVE-2021-43803
Unexpected server crash in Next.js.
Medium
CVE-2021-23718
Server-Side Request Forgery in ssrf-agent
High
CVE-2021-40829
Improper certificate management in AWS IoT Device SDK v2
Medium
CVE-2021-40828
Improper certificate management in AWS IoT Device SDK v2
Medium
CVE-2021-41174
XSS vulnerability allowing arbitrary JavaScript execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.