Medium
CVE-2013-4940
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
Critical
CVE-2019-9115
irisnet-crypto RCE Vulnerability
Medium
CVE-2018-14040
Bootstrap vulnerable to Cross-Site Scripting (XSS)
Critical
CVE-2022-1650
Exposure of Sensitive Information in eventsource
High
CVE-2021-43307
semver-regex <= 3.1.3 and 4.0.0-4.0.3 - Regular Expression Denial of Service (ReDoS)
Medium
CVE-2021-42648
Cross site scripting in code-server
High
CVE-2022-1537
Race Condition in Grunt
High
CVE-2022-25324
Uncaught Exception in bignum
High
ghsa-52rh-5rpj-c3w6
Improper handling of multiline messages in node-irc
Medium
CVE-2013-7371
Node Connect Reflected Cross-Site Scripting in Sencha Labs Connect middleware
Medium
CVE-2022-30241
Cross-site Scripting in jquery.json-viewer
High
CVE-2022-24901
Authentication bypass and denial of service (DoS) vulnerabilities in Apple Game Center auth adapter
Critical
CVE-2022-28118
RCE in SiteServer CMS
High
CVE-2021-46440
Insecure password handling vulnerability in Strapi
Critical
CVE-2022-24437
OS Command Injection in git-pull-or-clone
High
CVE-2022-21144
Denial of service vulnerability exists in libxmljs
High
CVE-2022-21189
Prototype Pollution in Dexie
High
CVE-2022-23923
Privilege Issues in jailed
Medium
CVE-2022-25645
Prototype Pollution in dset
Medium
CVE-2022-25349
materialize-css vulnerable to cross-site Scripting (XSS) due to improper escape of user input
Medium
CVE-2022-25844
angular vulnerable to regular expression denial of service (ReDoS)
High
CVE-2022-25301
Prototype Pollution in jsgui-lang-essentials
Medium
CVE-2022-25854
tagify can pass a malicious placeholder to initiate the cross-site scripting (XSS) payload
High
CVE-2022-21227
Denial-of-Service when binding invalid parameters in sqlite3
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.