High
CVE-2022-25918
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
Medium
CVE-2022-39350
@dependencytrack/frontend vulnerable to Persistent Cross-Site-Scripting via Vulnerability Details
Low
ghsa-whpx-q3rq-w8jc
Hardening of TypedArrays with non-canonical numeric property names in SES
High
CVE-2022-41709
Markdownify subject to Remote Code Execution via malicious markdown file
Critical
CVE-2022-39322
Field-level access-control bypass for multiselect field
High
CVE-2022-39313
parse-server crashes when receiving file download request with invalid byte range
High
CVE-2022-3517
minimatch ReDoS vulnerability
Critical
CVE-2022-37602
Grunt-karma vulnerable to prototype pollution
High
CVE-2022-39300
Signature bypass via multiple root elements
High
CVE-2022-39299
Signature bypass via multiple root elements
Critical
CVE-2022-37614
mockery is vulnerable to prototype pollution
Medium
ghsa-2p3c-p3qw-69r4
The graphql-upload library included in Apollo Server 2 is vulnerable to CSRF mutations
Medium
CVE-2022-40440
mxGraph vulnerable to cross-site scripting in setTooltips function
Critical
CVE-2022-37617
thlorenz browserify-shim vulnerable to prototype pollution
Critical
CVE-2022-37611
tschaub gh-pages vulnerable to prototype pollution
Medium
CVE-2022-37601
loader-utils (JS package) < 2.0.3 - Prototype Pollution
Medium
CVE-2022-41376
Cross site scripting in Metro UI
High
CVE-2022-39288
fastify vulnerable to denial of service via malicious Content-Type
Low
CVE-2022-37599
loader-utils (JS package) < 3.2.1 - Regular Expression Denial of Service
Low
CVE-2022-37603
loader-utils (JS package) < 3.2.1 - Regular Expression Denial of Service
Low
ghsa-jjmg-x456-w976
Incorrect default cookie name and recommendation
High
CVE-2022-39287
tiny-csrf has openly visible CSRF tokens
Medium
CVE-2022-3423
NocoDB vulnerable to Denial of Service
High
CVE-2022-35923
v8n vulnerable to Inefficient Regular Expression Complexity
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.