High
CVE-2022-24814
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
Medium
CVE-2022-1233
URL Confusion When Scheme Not Supplied in medialize/uri.js
High
CVE-2022-24785
Path Traversal: 'dir/../../filename' in moment.locale
Medium
CVE-2022-21830
Cross-site Scripting in @rocket.chat/livechat
High
CVE-2022-24066
Command injection in simple-git
High
CVE-2022-24802
Prototype Pollution in deepmerge-ts
Medium
CVE-2022-0350
Cross-site Scripting in vditor
High
CVE-2022-24794
URL Redirection to Untrusted Site ('Open Redirect') in express-openid-connect
High
CVE-2022-26183
Untrusted Search Path in PNPM
Critical
CVE-2022-26260
Prototype Pollution in simple-plist
High
ghsa-5w9c-rv96-fr7g
Removal of functional code in faker.js
Low
CVE-2022-21718
Renderers can obtain access to random bluetooth device without permission in Electron
High
CVE-2022-25766
Command Injection in ungit
Medium
CVE-2022-24773
Improper Verification of Cryptographic Signature in `node-forge`
High
CVE-2022-24772
Improper Verification of Cryptographic Signature in node-forge
High
CVE-2022-24771
Improper Verification of Cryptographic Signature in node-forge
High
CVE-2022-24759
Failure to validate signature during handshake
Critical
CVE-2022-25354
Prototype Pollution in set-in
Critical
CVE-2022-25352
Prototype Pollution in libnested
Medium
CVE-2021-23632
Code injection in npm git
Critical
CVE-2022-0748
Arbitrary code execution in post-loader
Medium
CVE-2022-25296
Prototype Pollution in bodymen
Critical
CVE-2021-44908
Prototype Pollution in Sails.js
Medium
CVE-2021-23771
Sandbox escape in notevil and argencoders-notevil
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.