High
CVE-2022-41878
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 117
Reset filters
Critical
CVE-2022-39396
Remote code execution via MongoDB BSON parser through prototype pollution
High
CVE-2022-39313
parse-server crashes when receiving file download request with invalid byte range
Low
CVE-2022-39231
parse-server auth adapter app ID validation can be circumvented
Medium
CVE-2022-39225
parse-server's session object properties can be updated by foreign user if object ID is known
High
CVE-2022-36079
Parse Server vulnerable to brute force guessing of user sensitive data via search patterns
High
CVE-2022-31112
Protected fields exposed via LiveQuery
High
CVE-2022-31089
Invalid file request can crash server
High
CVE-2022-31083
Authentication bypass vulnerability in Apple Game Center auth adapter
High
CVE-2022-24901
Authentication bypass and denial of service (DoS) vulnerabilities in Apple Game Center auth adapter
Critical
CVE-2022-24760
Command injection in Parse Server through prototype pollution
High
CVE-2021-41109
LiveQuery publishes user session tokens in parse-server
Critical
CVE-2021-47986
Incorrect version tags linked to external repository
High
CVE-2021-39187
Parse Server crashes with query parameter
Medium
CVE-2021-39138
parse-server new anonymous user session acts as if it's created with password
Low
CVE-2020-26288
Parse Server stores password in plain text
Medium
CVE-2020-15270
receiving subscription objects with deleted session
Medium
CVE-2020-15126
GraphQL: Security breach on Viewer query
High
CVE-2020-5251
Information disclosure in parse-server
Medium
CVE-2019-1020013
Sensitive Data Exposure in parse-server
High
CVE-2019-1020012
Parse Server before v3.4.1 vulnerable to Denial of Service
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.