Critical
CVE-2023-30846
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
Critical
CVE-2023-30363
Prototype Pollution in vConsole
High
CVE-2023-30843
Hidden fields can be leaked on readable collections in Payload
Medium
CVE-2023-2307
@builder.io/qwik-city Cross-Site Request Forgery vulnerability
High
CVE-2023-30609
HTML injection in search results via plaintext message highlighting
Critical
CVE-2023-29566
Remote code execution in dawnsparks-node-tesseract
Critical
CVE-2023-27848
Remote code execution in broccoli-compass
High
CVE-2023-2251
Uncaught Exception in yaml
High
CVE-2023-30533
Prototype Pollution in sheetJS
Critical
CVE-2023-28131
Expo SDK has an OAuth vulnerability
High
CVE-2023-29019
Session fixation in fastify-passport
Medium
CVE-2023-29020
CSRF token fixation in fastify-passport
Medium
CVE-2023-2142
Nunjucks autoescape bypass leads to cross site scripting
Medium
CVE-2023-27495
Bypass of CSRF protection in the presence of predictable userInfo
Medium
CVE-2023-30548
Path traversal vulnerability in gatsby-plugin-sharp
Critical
CVE-2023-30547
vm2 Sandbox Escape vulnerability
High
CVE-2023-30542
GovernorCompatibilityBravo may trim proposal calldata
Low
CVE-2022-4942
eslint-detailed-reporter vulnerable to cross-site scripting
Critical
CVE-2023-22621
Strapi plugins vulnerable to Server-Side Template Injection and Remote Code Execution in the Users-Permissions Plugin
High
Exploited in attacks
CVE-2023-22894
Strapi leaking sensitive user information by filtering on private fields
Medium
CVE-2023-22893
Strapi does not verify the access or ID tokens issued during the OAuth flow
Medium
CVE-2023-30543
`chainId` may be outdated if user changes chains as part of connection in @web3-react
High
ghsa-xv3q-jrmm-4fxv
Authentication Bypass in @strapi/plugin-users-permissions
Critical
CVE-2023-2138
@nuxtlabs/github-module made Use of Hard-coded Credentials
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.