Alta
CVE-2020-36629
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.523
Restablecer filtros
Alta
CVE-2022-46175
json5 <= 1.0.1 and 2.0.0-2.2.1 - Prototype Pollution
Media
CVE-2022-25948
liquidjs may leak properties of a prototype
Media
CVE-2022-23541
jsonwebtoken's insecure implementation of key retrieval function could lead to Forgeable Public/Private Tokens from RSA to HMAC
Media
CVE-2022-23540
jsonwebtoken vulnerable to signature validation bypass due to insecure default algorithm in jwt.verify()
Alta
CVE-2022-23539
jsonwebtoken unrestricted key type could lead to legacy keys usage
Alta
CVE-2021-4264
dustjs-linkedin vulnerable to Prototype Pollution
Alta
CVE-2022-24431
abacus-ext-cmdline vulnerable to Command Injection
Media
CVE-2022-25929
Smoothie vulnerable to Cross-site Scripting when tooltipLabel or strokeStyle are controlled by users
Alta
CVE-2022-25895
lite-dev-server vulnerable to Directory Traversal
Crítica
CVE-2022-25893
vm2 vulnerable to Arbitrary Code Execution
Alta
CVE-2022-25940
lite-server vulnerable to Denial of Service
Crítica
CVE-2022-25904
safe-eval vulnerable to Prototype Pollution
Alta
CVE-2022-25171
p4 vulnerable to Command Injection due to improper input sanitization
Alta
CVE-2022-25931
easy-static-server vulnerable to Directory Traversal
Media
CVE-2021-4260
Oils JS vulnerable to Open Redirect
Crítica
CVE-2020-36618
FurqanSoftware/node-whois vulnerable to Prototype Pollution
Alta
CVE-2016-20018
Knex.js has a limited SQL injection vulnerability
Crítica
CVE-2021-4245
npm package rfc6902 vulnerable to Prototype Pollution
Crítica
CVE-2021-33420
replicator vulnerable to Deserialization of Untrusted Data
Media
CVE-2020-24855
easywebpack-cli Path Traversal vulnerability
Crítica
CVE-2022-24377
cycle-import-check vulnerable to Command Injection
Media
CVE-2022-23505
Authentication Bypass for passport-wsfed-saml2
Alta
CVE-2022-23510
@cubejs-backend/api-gateway row level security bypass
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.