Medium
CVE-2023-48218
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
Medium
CVE-2023-48223
JWT Algorithm Confusion
High
CVE-2023-48238
json-web-token library is vulnerable to a JWT algorithm confusion attack
Medium
ghsa-wm63-7627-ch33
@vendure/core's insecure currencyCode handling allows wrong payment amounts
High
ghsa-54xq-cgqr-rpm3
sharp vulnerability in libwebp dependency CVE-2023-4863
Medium
CVE-2023-48219
TinyMCE vulnerable to mutation Cross-site Scripting via special characters in unescaped text nodes
Medium
CVE-2019-25155
DOMPurify Open Redirect vulnerability
Medium
CVE-2023-46998
Bootbox.js Cross Site Scripting vulnerability
Medium
CVE-2023-46729
Sentry Next.js vulnerable to SSRF via Next.js SDK tunnel endpoint
Medium
CVE-2023-45885
NASA Open MCT Cross Site Scripting vulnerability
Medium
CVE-2023-45884
NASA Open MCT Cross Site Request Forgery (CSRF) vulnerability
Medium
CVE-2023-26156
chromedriver Command Injection vulnerability
Medium
CVE-2023-45857
Axios Cross-Site Request Forgery Vulnerability
High
CVE-2023-45827
Prototype Pollution(PP) vulnerability in setByPath
High
CVE-2023-39345
Unauthorized Access to Private Fields in User Registration API
Medium
CVE-2021-43849
cordova-plugin-fingerprint-aio DoS vulnerability
High
CVE-2015-20110
generator-jhipster allows a timing attack against validateToken due to a string comparison that stops at the first character
High
CVE-2023-46234
browserify-sign upper bound check issue in `dsaVerify` leads to a signature forgery attack
Critical
CVE-2023-46233
crypto-js PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard
Critical
CVE-2023-46133
crypto-es PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard
High
CVE-2023-39619
Inefficient Regular Expression Complexity in node-email-check
High
CVE-2023-46119
Parse Server may crash when uploading file without extension
Low
CVE-2023-46298
Next.js missing cache-control header may lead to CDN caching empty reply
High
CVE-2023-46115
Tauri's Updater Private Keys Possibly Leaked via Vite Environment Variables
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.