Low
ghsa-wmpv-c2jp-j2xg
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 5,032
Reset filters
Critical
CVE-2021-43571
Improper Verification of Cryptographic Signature in starkbank-ecdsa
Medium
CVE-2021-25978
Cross-site Scripting in apostrophe
High
ghsa-jcjx-c3j3-44pr
Insufficient Session Expiration in @cyyynthia/tokenize
Medium
CVE-2021-41174
XSS vulnerability allowing arbitrary JavaScript execution
Medium
CVE-2021-41134
Stored XSS in Jupyter nbdime
High
ghsa-qm7x-rc44-rrqw
Cross-site Scripting Vulnerability in GraphQL Playground (distributed by Apollo Server)
High
CVE-2021-41249
XSS vulnerability in GraphQL Playground from untrusted schemas
High
CVE-2021-41248
GraphiQL introspection schema template injection attack
Critical
ghsa-73qr-pfmq-6rp8
Embedded malware in coa
Medium
CVE-2024-21910
Cross-site scripting vulnerability in TinyMCE plugins
High
CVE-2021-4229
Embedded malware in ua-parser-js
Medium
CVE-2024-21908
Cross-site scripting vulnerability in TinyMCE
High
CVE-2021-42228
Cross Site Request Forgery in kindeditor
Medium
CVE-2021-39184
Electron's sandboxed renderers can obtain thumbnails of arbitrary files through the nativeImage API
Critical
CVE-2019-18413
SQL Injection and Cross-site Scripting in class-validator
Low
ghsa-q324-q795-2q5p
Path traversal when using `preview-docs` when working dir contains files with question mark `?` in name
High
CVE-2021-22964
DOS and Open Redirect with user input
High
CVE-2021-21278
Risk of code injection
High
CVE-2021-41117
Insecure random number generation in keypair
High
CVE-2021-28128
Weak Password Recovery Mechanism for Forgotten Password in Strapi
Medium
CVE-2021-30109
Cross-site Scripting in Froala Editor
Medium
CVE-2021-22963
URL Redirection to Untrusted Site ('Open Redirect') in fastify-static
Medium
CVE-2021-41580
Improper Access Control in passport-oauth2
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.