High
CVE-2022-25900
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
High
CVE-2022-25758
Regular expression denial of service in scss-tokenizer
Critical
CVE-2021-40663
Prototype Pollution in deep.assign
High
CVE-2022-0624
Authorization Bypass in parse-path
Medium
CVE-2022-2217
Cross site scripting in parse-url
Critical
CVE-2022-2216
Server-Side Request Forgery in parse-url
Medium
CVE-2022-2218
Cross site scripting in parse-url
High
CVE-2022-0722
Hostname confusion in parse-url
High
CVE-2022-25898
JWS and JWT signature validation vulnerability with special characters
High
CVE-2022-21231
Prototype Pollution in deep-get-set
High
CVE-2022-31103
Improper handling of CSS at-rules in lettersanitizer
Medium
CVE-2022-31110
Denial of Service (DoS) vulnerability in RSSHub
Medium
CVE-2022-23080
Server-Side Request Forgery in Directus
High
CVE-2022-31093
Improper Handling of `callbackUrl` parameter in next-auth
High
CVE-2022-31089
Invalid file request can crash server
Medium
CVE-2022-33987
got (JS Package) <= 11.8.4 and 12.0-<12.1.0 - Open Redirect
High
CVE-2022-22138
Uncontrolled Resource Consumption in fast-string-search
High
CVE-2022-25345
Uncontrolled Resource Consumption in @discordjs/opus
High
CVE-2022-25852
pg-native and libpq vulnerable to uncontrolled resource consumption
High
CVE-2022-21213
Prototype Pollution in mout
Medium
CVE-2022-25872
Out-of-bounds Read in fast-string-search
Medium
CVE-2022-25871
Prototype Pollution in querymen
High
CVE-2022-31083
Authentication bypass vulnerability in Apple Game Center auth adapter
Medium
CVE-2022-31070
Potential Sensitive Cookie Exposure in NPM Packages @finastra/nestjs-proxy, @ffdc/nestjs-proxy
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.