High
CVE-2023-37478
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 757
Reset filters
Medium
CVE-2023-34459
OpenZeppelin Contracts using MerkleProof multiproofs may allow proving arbitrary leaves for specific trees
Medium
CVE-2023-34234
OpenZeppelin Contracts's governor proposal creation may be blocked by frontrunning
Medium
CVE-2023-33187
html inputs of type password recorded in plaintext when converted to text inputs
Medium
CVE-2023-32325
Potential for cross-site scripting in PostHog-js
High
CVE-2023-30542
GovernorCompatibilityBravo may trim proposal calldata
High
Exploited in attacks
CVE-2023-22894
Strapi leaking sensitive user information by filtering on private fields
Medium
CVE-2023-30543
`chainId` may be outdated if user changes chains as part of connection in @web3-react
High
ghsa-xv3q-jrmm-4fxv
Authentication Bypass in @strapi/plugin-users-permissions
Medium
CVE-2023-30541
OpenZeppelin Contracts TransparentUpgradeableProxy clashing selector calls may not be delegated
Critical
CVE-2023-29017
vm2 vulnerable to sandbox escape
High
CVE-2023-29008
SvelteKit framework has Insufficient CSRF protection for CORS requests
Medium
CVE-2023-26117
angular vulnerable to regular expression denial of service via the $resource service
Medium
CVE-2023-26116
angular vulnerable to regular expression denial of service via the angular.copy() utility
Medium
CVE-2023-26118
angular vulnerable to regular expression denial of service via the <input type="url"> element
Medium
CVE-2023-27481
Directus vulnerable to extraction of password hashes through export querying
Medium
CVE-2023-26488
OpenZeppelin Contracts contains Incorrect Calculation
High
CVE-2022-25918
Inefficient Regular Expression Complexity in shescape
Medium
CVE-2022-39350
@dependencytrack/frontend vulnerable to Persistent Cross-Site-Scripting via Vulnerability Details
High
CVE-2022-35923
v8n vulnerable to Inefficient Regular Expression Complexity
High
CVE-2022-36076
NodeBB account takeover via SSO plugins
High
CVE-2022-35961
OpenZeppelin Contracts vulnerable to ECDSA signature malleability
High
CVE-2022-31198
OpenZeppelin Contracts's GovernorVotesQuorumFraction updates to quorum may affect past defeated proposals
Medium
CVE-2022-35916
OpenZeppelin Contracts's Cross chain utilities for Arbitrum L2 see EOA calls as cross chain calls
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.