High
CVE-2023-48238
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 5,032
Reset filters
Medium
ghsa-wm63-7627-ch33
@vendure/core's insecure currencyCode handling allows wrong payment amounts
Medium
CVE-2023-48219
TinyMCE vulnerable to mutation Cross-site Scripting via special characters in unescaped text nodes
Medium
CVE-2023-46729
Sentry Next.js vulnerable to SSRF via Next.js SDK tunnel endpoint
High
CVE-2023-45827
Prototype Pollution(PP) vulnerability in setByPath
High
CVE-2023-39345
Unauthorized Access to Private Fields in User Registration API
Medium
CVE-2021-43849
cordova-plugin-fingerprint-aio DoS vulnerability
High
CVE-2015-20110
generator-jhipster allows a timing attack against validateToken due to a string comparison that stops at the first character
High
CVE-2023-46234
browserify-sign upper bound check issue in `dsaVerify` leads to a signature forgery attack
Critical
CVE-2023-46233
crypto-js PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard
Critical
CVE-2023-46133
crypto-es PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard
High
CVE-2023-39619
Inefficient Regular Expression Complexity in node-email-check
High
CVE-2023-45820
Directus crashes on invalid WebSocket message
Medium
CVE-2023-45819
TinyMCE XSS vulnerability in notificationManager.open API
Medium
CVE-2023-45818
TinyMCE mXSS vulnerability in undo/redo, getContent API, resetContent API, and Autosave plugin
High
CVE-2023-45811
Synchrony deobfuscator prototype pollution vulnerability leading to arbitrary code execution
Medium
CVE-2023-43794
nocodb SQL Injection vulnerability
High
CVE-2023-26155
node-qpdf vulnerable to command injection
High
CVE-2023-44400
Uptime Kuma has Persistentent User Sessions
Critical
CVE-2023-45311
Code injection in fsevents
High
ghsa-mvrp-3cvx-c325
Zod denial of service vulnerability during email validation
Medium
CVE-2023-44270
PostCSS line return parsing error
Medium
CVE-2023-4316
Zod denial of service vulnerability
High
CVE-2023-43646
Chaijs/get-func-name vulnerable to ReDoS
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.