High
CVE-2023-26105
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
High
CVE-2023-26104
Denial of Service vulnerability in lite-web-server
High
CVE-2022-44310
ecdh vulnerable to Exposure of Resource to Wrong Sphere
Critical
CVE-2023-22578
Sequelize - Default support for “raw attributes” when using parentheses
High
CVE-2023-26102
rangy vulnerable to Prototype Pollution
Medium
CVE-2022-48345
@braintree/sanitize-url Cross-site Scripting vulnerability
Critical
CVE-2023-22579
Unsafe fall-through in getWhereConditions
Critical
CVE-2023-25813
Sequelize vulnerable to SQL Injection via replacements
Critical
CVE-2023-25805
Versionn Command Injection Vulnerability
Medium
CVE-2021-32860
iziModal Cross-site Scripting vulnerability
Medium
CVE-2021-32859
Baremetrics date range picker vulnerable to Cross-site Scripting
Medium
CVE-2021-32855
Vditor Cross-site Scripting vulnerability
Medium
CVE-2021-32854
textAngular Cross-site Scripting vulnerability
Medium
CVE-2021-32853
Erxes vulnerable to Cross-site Scripting
Medium
CVE-2021-32851
Mind-elixir Cross-site Scripting vulnerability
Medium
CVE-2021-32850
@claviska/jquery-minicolors vulnerable to Cross-site Scripting
Medium
CVE-2016-15025
generator-hottowel Cross-site Scripting vulnerability
Medium
CVE-2022-48115
Cross-site Scripting in jspreadsheet
Medium
CVE-2023-23936
CRLF Injection in Nodejs ‘undici’ via host
High
CVE-2023-24807
Regular Expression Denial of Service in Headers
High
CVE-2023-25653
Improper calculations in ECC implementation can trigger a Denial-of-Service (DoS)
Medium
CVE-2025-27098
Unwanted access to the entire file system vulnerability due to a missing check in `staticFiles` HTTP handler
Medium
CVE-2023-22580
Sequelize information disclosure vulnerability
High
CVE-2023-25576
Denial of service due to unlimited number of parts
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.