Critical
CVE-2022-24304
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 919
Reset filters
High
CVE-2022-35142
Raneto Denial of Service via crafted payload injected into `Search` parameter
Critical
CVE-2022-35131
Joplin is vulnerable to arbitrary code execution
Critical
CVE-2022-25759
convert-svg-core vulnerable to remote code injection
High
CVE-2020-7641
grunt-util-property 0.0.2 function call can add/modify properties of Object.prototype using a __proto__ payload
Critical
CVE-2022-31180
Shescape vulnerable to insufficient escaping of whitespace
High
CVE-2022-31179
Shescape prior to 1.5.8 vulnerable to insufficient escaping of line feeds for CMD
Medium
CVE-2022-32114
Strapi 4.1.12 Cross-site Scripting via crafted file
High
CVE-2022-25863
Unsanitized JavaScript code injection possible in gatsby-plugin-mdx
Medium
CVE-2022-29172
Cross-site Scripting in Auth0 Lock
Critical
CVE-2021-25944
deep-defaults vulnerable to prototype pollution
Medium
CVE-2019-10794
component-flatten vulnerable to Prototype Pollution
Critical
CVE-2019-17625
Rambox RCE Vulnerability
Critical
CVE-2019-15954
Total.js CMS RCE Vulnerability
High
CVE-2019-15952
Total.js CMS Path Traversal
High
CVE-2022-29167
Uncontrolled Resource Consumption in Hawk
Medium
CVE-2022-25854
tagify can pass a malicious placeholder to initiate the cross-site scripting (XSS) payload
Critical
CVE-2022-27952
Unrestricted Upload of File with Dangerous Type in Payload
Medium
CVE-2022-25296
Prototype Pollution in bodymen
Medium
CVE-2022-24725
Exposure of home directory through shescape on Unix with Bash
Medium
CVE-2021-37504
jQuery-Upload-File XSS in fileNameStr
Medium
CVE-2019-10795
Prototype Pollution in undefsafe
Medium
CVE-2019-10793
Prototype Pollution in dot-object
Low
CVE-2021-43862
jquery.terminal self XSS on user input
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.