Medium
CVE-2018-9861
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,458
Reset filters
High
CVE-2018-1000118
Electron protocol handler browser vulnerable to Command Injection
High
CVE-2018-1000136
Electron Vulnerable to Code Execution by Re-Enabling Node.js Integration
High
CVE-2018-1000096
tiny-json-http missing SSL certificate validation
High
CVE-2018-1000086
pym.js CSRF Vulnerability
High
CVE-2018-7307
Auth0-js bypasses CSRF checks
Medium
CVE-2018-7651
Regular Expression Denial of Service in ssri
Medium
CVE-2018-1000023
Insight API transaction broadcast endpoint can result in Full Path Disclosure
High
CVE-2018-7560
AWS Lambda parser is vulnerable to Regular Expression Denial of Service
High
CVE-2017-1000189
ejs vulnerable to DoS due to weak input validation
High
CVE-2017-18214
Regular Expression Denial of Service in moment
High
CVE-2017-18077
ReDoS in brace-expansion
High
CVE-2018-6184
Directory traversal vulnerability in Next.js
High
CVE-2018-1000006
Remote Code Execution in electron
High
CVE-2016-10707
Denial of Service in jquery
Medium
CVE-2015-9251
Cross-Site Scripting (XSS) in jquery
Medium
CVE-2017-1000427
Marked vulnerable to XSS from data URIs
High
CVE-2017-1000452
Samlify vulnerable to Authentication Bypass by allowing tokens to be reused with different usernames
High
CVE-2016-10703
Denial of Service in ecstatic
Medium
CVE-2017-10910
Denial of Service in mqtt
High
CVE-2017-17068
auth0-js Privilege Escalation Vulnerability
Critical
CVE-2017-1001003
Arbitrary Code Execution in mathjs
Critical
CVE-2017-1001002
Arbitrary Code Execution in mathjs
High
CVE-2017-16877
Next.js Directory Traversal Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.