Media
ghsa-8mgq-6r2q-82w9
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 7.523
Restablecer filtros
Media
CVE-2022-36046
Next.js is a React framework that can provide building blocks to create web applications. All of the following must be true to be affected by this CVE: Next.js version 12.2.3, Node.js version above v1
Crítica
CVE-2022-36045
Cryptographically weak PRNG in `utils.generateUUID`
Baja
ghsa-56x4-j7p9-fcf9
Command Injection in moment-timezone
Media
ghsa-v78c-4p63-2j6c
Cleartext Transmission of Sensitive Information in moment-timezone
Media
CVE-2022-36031
Directus vulnerable to unhandled exception on illegal filename_disk value
Alta
CVE-2020-26938
oauth2-server through 3.1.1 vulnerable to Open Redirect
Crítica
CVE-2022-25921
morgan-json vulnerable to Arbitrary Code Execution
Crítica
CVE-2022-25644
@pendo324/get-process-by-name are vulnerable to Arbitrary Code Execution
Crítica
CVE-2022-21165
Font-Converter Vulnerable to Arbitrary Command Injection
Crítica
CVE-2022-24304
Mongoose Vulnerable to Prototype Pollution in Schema Object
Alta
CVE-2022-24375
node-opcua DoS when bypassing limitations for excessive memory consumption
Media
CVE-2021-43309
uri-template-lite Regular Expression Denial of Service
Alta
CVE-2022-25231
node-opcua DoS vulnerability via message with memory allocation that exceeds v8's memory limit
Alta
CVE-2022-21208
Uncontrolled Resource Consumption in node-opcua
Media
CVE-2022-2932
Cross site scripting in mobiledoc-kit
Alta
CVE-2022-35204
Vite before v2.9.13 vulnerable to directory traversal via crafted URL to victim's service
Crítica
CVE-2022-36010
React Editable Json Tree vulnerable to arbitrary code execution via function parsing
Media
CVE-2022-35948
Nodejs ‘undici’ vulnerable to CRLF Injection via Content-Type
Media
CVE-2022-35954
@actions/core has Delimiter Injection Vulnerability in exportVariable
Alta
CVE-2022-35961
OpenZeppelin Contracts vulnerable to ECDSA signature malleability
Media
CVE-2022-35949
`undici.request` vulnerable to SSRF using absolute URL on `pathname`
Media
ghsa-2fvv-qxrq-7jq6
apollo-server-core vulnerable to URL-based XSS attack affecting IE11 on default landing page
Alta
CVE-2022-31198
OpenZeppelin Contracts's GovernorVotesQuorumFraction updates to quorum may affect past defeated proposals
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.