High
CVE-2017-16138
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,458
Reset filters
High
CVE-2018-3711
Denial of Service vulnerability with large JSON payloads in fastify
High
CVE-2018-3731
Path Traversal in public
High
CVE-2018-3732
Path Traversal in resolve-path
High
CVE-2018-3733
Path Traversal in crud-file-server
High
CVE-2018-3734
Path Traversal in stattic
Medium
CVE-2018-3743
Open Redirect in hekto
Medium
CVE-2018-3726
Cross-site Scripting (XSS) - Stored in crud-file-server
Medium
CVE-2018-3809
Information Exposure on Case Insensitive File Systems in serve
Critical
CVE-2017-16088
Sandbox Breakout in safe-eval
Critical
CVE-2017-16100
Command Injection in dns-sync
Critical
CVE-2017-5941
Code Execution through IIFE in node-serialize
Critical
CVE-2017-5954
Code Execution Through IIFE in serialize-to-js
Critical
ghsa-hxxf-q3w9-4xgw
Malicious Package in eslint-scope
Critical
CVE-2017-16042
Growl before 1.10.0 vulnerable to Command Injection
Medium
CVE-2015-9236
Incorrect handling of CORS preflight request headers in hapi
High
CVE-2015-9240
Authentication Weakness in keystone
High
CVE-2015-9241
Denial of Service in hapi
High
CVE-2015-9242
Denial of Service in ecstatic
Critical
CVE-2016-10548
Arbitrary Code Injection in reduce-css-calc
Critical
CVE-2018-3746
Command Injection in pdfinfojs
Medium
CVE-2018-11093
Cross-Site Scripting in @ckeditor/ckeditor5-link
High
CVE-2018-3728
Prototype Pollution in hoek
Medium
CVE-2018-1000160
Cross-Site Scripting in @risingstack/protect
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.