Medium
CVE-2022-35915
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,614
Reset filters
Medium
CVE-2022-31175
CKEditor5 cross-site scripting vulnerability caused by the editor instance destroying process
Low
CVE-2022-31186
next-auth before v4.10.2 and v3.29.9 leaks excessive information into log
Critical
CVE-2022-25759
convert-svg-core vulnerable to remote code injection
High
CVE-2022-31172
OpenZeppelin Contracts's SignatureChecker may revert on invalid EIP-1271 signers
High
CVE-2022-31170
OpenZeppelin Contracts's ERC165Checker may revert instead of returning false
Low
CVE-2022-31151
undici before v5.8.0 vulnerable to uncleared cookies on cross-host / cross-origin redirect
Medium
CVE-2022-31160
jQuery UI vulnerable to XSS when refreshing a checkboxradio with an HTML-like initial text label
Medium
CVE-2022-25869
Angular (deprecated package) Cross-site Scripting
Critical
CVE-2022-31180
Shescape vulnerable to insufficient escaping of whitespace
High
CVE-2022-31179
Shescape prior to 1.5.8 vulnerable to insufficient escaping of line feeds for CMD
Low
CVE-2022-25858
terser (JS Package) < 5.14.2 - Denial of Service
High
CVE-2022-31127
Improper handling of email input
High
CVE-2022-31129
Moment.js vulnerable to Inefficient Regular Expression Complexity
Medium
CVE-2022-31108
Possible inject arbitrary `CSS` into the generated graph affecting the container HTML
High
CVE-2022-31093
Improper Handling of `callbackUrl` parameter in next-auth
High
CVE-2022-21213
Prototype Pollution in mout
High
CVE-2022-32210
ProxyAgent vulnerable to MITM
High
CVE-2021-34081
OS Command Injection in gitsome
High
CVE-2022-29244
Packing does not respect root-level ignore files in workspaces
High
CVE-2022-29219
AttesterSlashing number overflow
Medium
CVE-2022-29214
URL Redirection to Untrusted Site ('Open Redirect') in next-auth
High
CVE-2019-17221
PhantomJS Arbitrary File Read
Critical
CVE-2021-25915
Changeset vulnerable to prototype pollution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.