Medium
CVE-2023-28155
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
High
CVE-2023-25345
Arbitrary local file read vulnerability during template rendering
High
CVE-2023-27490
Missing proper state, nonce and PKCE checks for OAuth authentication
High
CVE-2022-43441
sqlite vulnerable to code execution due to Object coercion
High
CVE-2023-28154
webpack JS package <= 5.75.0 - Sandbox Bypass
Critical
CVE-2021-33360
stoqey/gnuplot is vulnerable to command injection
Critical
CVE-2023-26110
node-bluetooth is vulnerable to Buffer Overflow via the findSerialPortChannel method due to improper user input length validation
Critical
CVE-2023-26109
node-bluetooth-serial-port is vulnerable to Buffer Overflow via the findSerialPortChannel
Critical
CVE-2023-1283
builderio/qwik is vulnerable to code injection
Medium
CVE-2023-27481
Directus vulnerable to extraction of password hashes through export querying
High
CVE-2023-27474
directus vulnerable to HTML Injection in Password Reset email to custom Reset URL
High
CVE-2023-26111
node-static and @nubosoftware/node-static vulnerable to Directory Traversal
Medium
CVE-2023-26108
@nestjs/core vulnerable to Information Exposure via StreamableFile pipe
High
CVE-2023-26107
SketchSVG Arbitrary Code Injection vulnerability
High
CVE-2023-26106
dot-lens vulnerable to Prototype Pollution
Critical
CVE-2021-4329
json-logic-js Command Injection vulnerability
Medium
CVE-2023-26492
Directus vulnerable to Server-Side Request Forgery On File Import
Medium
CVE-2023-26488
OpenZeppelin Contracts contains Incorrect Calculation
Medium
ghsa-cp47-r258-q626
Vega vulnerable to arbitrary code execution when clicking href links
Medium
CVE-2022-2237
keycloak-connect contains Open redirect vulnerability in the Node.js adapter
Medium
CVE-2023-26486
Vega Expression Language `scale` expression function Cross Site Scripting
Medium
CVE-2023-26487
Vega has Cross-site Scripting vulnerability in `lassoAppend` function
Medium
CVE-2023-26491
rsshub vulnerable to Cross-site Scripting via unvalidated URL parameters
Low
CVE-2021-4326
Imperative CLI vulnerable to Command Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.