High
ghsa-r3hf-q8q7-fv2p
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
High
CVE-2023-38704
import-in-the-middle has unsanitized user controlled input in module generation
Medium
CVE-2023-38690
matrix-appservice-irc IRC command injection via admin commands containing newlines
Medium
CVE-2023-38691
matrix-appservice-bridge doesn't verify the sub parameter of an openId token exhange, allowing unauthorized access to provisioning APIs
Low
CVE-2023-38700
matrix-appservice-irc events can be crafted to leak parts of targeted messages from other bridged rooms
Critical
ghsa-g6w6-h933-4rc5
Soketi was exposed to Sandbox Escape vulnerability via vm2
Medium
CVE-2023-3348
Cloudflare Wrangler directory traversal vulnerability
Medium
CVE-2023-38698
.eth registrar controller can shorten the duration of registered names
High
CVE-2023-37478
pnpm incorrectly parses tar archives relative to specification
Medium
CVE-2023-38695
@simonsmith/cypress-image-snapshothas fix for insecure snapshot file names
High
CVE-2023-26139
underscore-keypath vulnerable to Prototype Pollution
Critical
ghsa-8www-cffh-4q98
Anyone with a share link can RESET all website data in Umami
High
ghsa-wxf3-4fvj-vqqx
Unsafe plugins can be installed via pack import by tenant admins
High
CVE-2023-38504
DoS vulnerability for apps with sockets enabled
Medium
CVE-2023-38503
Incorrect Permission Checking for GraphQL Subscriptions
Medium
CVE-2023-2850
Unintentional leakage of private information via cross-origin websocket session hijacking
High
CVE-2023-34235
Leaking sensitive user information still possible by filtering on private with prefix fields
Medium
CVE-2023-34093
Making all attributes on a content-type public without noticing it
Critical
CVE-2023-26045
Path traversal and code execution via prototype vulnerability
High
CVE-2023-37899
Feathers socket handler allows abusing implicit toString
Medium
CVE-2023-37259
matrix-react-sdk vulnerable to XSS in Export Chat feature
Critical
CVE-2023-3696
Mongoose Prototype Pollution vulnerability
Medium
CVE-2023-3691
layui vulnerable to cross-site scripting
Critical
CVE-2023-2507
CleverTap Cordova plugin vulnerable to Cross-site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.