Critical
CVE-2020-7701
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filters
Critical
CVE-2020-7700
Prototype Pollution in phpjs
Medium
CVE-2020-8136
Uncontrolled Resource Consumption in fastify-multipart
Critical
CVE-2020-17479
Validation bypass in jpv
High
CVE-2021-27292
Regular Expression Denial of Service (ReDoS) in ua-parser-js
Medium
CVE-2021-27515
Path traversal in url-parse
Medium
CVE-2021-23362
Regular Expression Denial of Service in hosted-git-info
Medium
CVE-2021-26540
Improper Input Validation in sanitize-html
Medium
CVE-2021-26539
Improper Input Validation in sanitize-html
Critical
CVE-2021-23358
Arbitrary Code Execution in underscore
High
CVE-2021-23337
lodash vulnerable to Code Injection via `_.template` imports key names
High
CVE-2021-23371
Denial of service in chrono-node
Critical
CVE-2021-23369
Remote code execution in handlebars when compiling templates
Medium
CVE-2021-23380
Arbitrary command execution in roar-pidusage
Critical
CVE-2021-23376
Command Injection in ffmpegdotjs
High
CVE-2021-23381
Command Injection in killing
High
CVE-2021-23379
Command injection in portkiller
High
CVE-2021-23375
Command Injection in psnode
Medium
CVE-2021-31712
Cross-site Scripting in React Draft Wysiwyg
High
CVE-2021-20085
Prototype Pollution in backbone-query-parameters
Critical
CVE-2021-28860
Prototype Pollution in mixme
High
CVE-2021-29489
Options structure open to Cross-site Scripting if passed unfiltered
High
CVE-2020-28499
Prototype Pollution in merge
Critical
CVE-2020-28502
xmlhttprequest and xmlhttprequest-ssl vulnerable to Arbitrary Code Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.