Medium
CVE-2022-24725
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 557
Reset filters
Medium
CVE-2022-0691
url-parse incorrectly parses hostname / protocol due to unstripped leading control characters.
Medium
CVE-2022-0122
Open Redirect in node-forge
Medium
CVE-2021-41174
XSS vulnerability allowing arbitrary JavaScript execution
High
ghsa-qm7x-rc44-rrqw
Cross-site Scripting Vulnerability in GraphQL Playground (distributed by Apollo Server)
High
CVE-2021-41249
XSS vulnerability in GraphQL Playground from untrusted schemas
High
CVE-2021-41248
GraphiQL introspection schema template injection attack
High
CVE-2021-37712
Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning using symbolic links
Medium
CVE-2021-32796
Misinterpretation of malicious XML input
Critical
CVE-2020-27664
Authorization bypass in Strapi
Medium
CVE-2021-27515
Path traversal in url-parse
Medium
CVE-2021-21366
Misinterpretation of malicious XML input
Critical
ghsa-xfrc-7mj2-5xh9
Undefined Behavior in zencashjs
Medium
CVE-2012-6708
Cross-Site Scripting in jquery
High
CVE-2014-3744
Directory Traversal in st
Low
CVE-2015-1164
Open Redirect in serve-static
High
CVE-2013-3364
Unauthenticated Remote Command Injection in ep_imageconvert
Low
CVE-2020-15119
DOM-based XSS in auth0-lock
Medium
ghsa-7xcx-6wjh-7xp2
Command Injection in standard-version
High
CVE-2020-4038
Reflected XSS in GraphQL Playground
High
ghsa-49r3-3h96-rwj6
Cross-Site Scripting in ids-enterprise
High
ghsa-hpfq-8wx8-cgqw
Cross-Site Scripting in ids-enterprise
High
ghsa-crfx-5phg-hmw9
Cross-Site Scripting in ids-enterprise
Medium
ghsa-g74r-ffvr-5q9f
Memory Exposure in concat-stream
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.