Medium
CVE-2023-42399
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 5,032
Reset filters
High
ghsa-22rr-f3p8-5gf8
Directus affected by VM2 sandbox escape vulnerability
Medium
CVE-2023-41592
Froala Editor Cross-site Scripting vulnerability
High
CVE-2023-38507
Strapi Improper Rate Limiting vulnerability
Medium
CVE-2023-37263
Strapi's field level permissions not being respected in relationship title
Medium
CVE-2023-36472
Strapi may leak sensitive user information, user reset password, tokens via content-manager views
High
CVE-2023-39584
Hexo `include_code` has a path traversal
Medium
CVE-2023-41646
Buttercup allows attackers to obtain the hash of the master password
Medium
CVE-2023-39956
Electron vulnerable to out-of-package code execution when launched with arbitrary cwd
Medium
CVE-2023-29198
Electron context isolation bypass via nested unserializable return value
High
CVE-2023-23623
Electron's Content-Secrity-Policy disabling eval not applied consistently in renderers with sandbox disabled
Low
ghsa-j5g3-5c8r-7qfx
Prevent logging invalid header values
High
CVE-2023-39663
MathJax Regular expression Denial of Service (ReDoS)
Medium
CVE-2021-32050
MongoDB Driver may publish events containing authentication-related data
Medium
CVE-2023-41037
Cleartext Signed Message Signature Spoofing in openpgp
Medium
CVE-2023-41167
@webiny/react-rich-text-renderer vulnerable to insecure rendering of rich text content
Low
ghsa-q4pp-j36h-3gqg
Minimal `basti` IAM Policy Allows Shell Access
High
CVE-2023-39141
webui-aria2 Path Traversal vulnerability
High
CVE-2023-40185
Shescape on Windows escaping may be bypassed in threaded context
Medium
CVE-2023-40178
@node-saml/node-saml's validatePostRequestAsync does not include checkTimestampsValidityError
Medium
CVE-2023-26140
@excalidraw/excalidraw Cross-site Scripting vulnerability
Medium
CVE-2023-40028
Ghost vulnerable to arbitrary file read via symlinks in content import
Critical
CVE-2023-40013
external-svg-loader Cross-site Scripting vulnerability
Medium
CVE-2023-38687
Svelecte item names vulnerable to execution of arbitrary JavaScript
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.