High
CVE-2022-0439
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Critical
CVE-2021-23383
Prototype Pollution in handlebars
High
CVE-2021-26543
Command injection in git-parse
Critical
CVE-2020-7629
OS Command Injection in install-package
Critical
CVE-2020-7630
OS Command Injection in git-add-remote
Medium
CVE-2021-23384
Open Redirect in koa-remove-trailing-slashes
Medium
CVE-2021-33041
Cross-site Scripting in vmd
Critical
CVE-2020-7627
OS Command Injection in node-key-sender
Critical
CVE-2020-7625
Injection in op-browser
Critical
CVE-2020-7626
karma-mojo enables OS Command Injection
Medium
CVE-2019-10062
Cross-site Scripting in aurelia-framework
Critical
CVE-2021-29369
Code injection in @rkesters/gnuplot
Critical
CVE-2020-7623
OS Command Injection in jscover
Critical
CVE-2020-7621
OS Command Injection in strong-nginx-controller
High
CVE-2021-32820
Insecure template handling in Express-handlebars
Low
CVE-2017-18869
Time-of-check Time-of-use (TOCTOU) Race Condition in chownr
Medium
CVE-2019-19935
DOM-based cross-site scripting in Froala Editor
Medium
CVE-2020-15366
Prototype Pollution in Ajv
Medium
CVE-2019-2391
Deserialization of Untrusted Data in bson
High
CVE-2020-11969
Missing Authentication for Critical Function in Apache TomEE
Critical
CVE-2020-9296
Expression Language Injection in Netflix Conductor
Medium
CVE-2020-9495
Injection in Apache Archiva
Critical
CVE-2020-9480
In Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configured to require authentication (spark.authenticate) via a shared secret. When enabled, however, a specially-craft
Medium
CVE-2019-14900
SQL Injection in Hibernate ORM
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.