High
CVE-2020-17480
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,474
Reset filters
Medium
CVE-2019-15607
Cross-Site Scripting in node-red
High
CVE-2020-5219
Remote Code Execution in Angular Expressions
Medium
CVE-2016-1000236
cookie-signature Timing Attack
Critical
Exploited in attacks
CVE-2019-10758
Remote Code Execution Vulnerability in NPM mongo-express
Critical
CVE-2019-19919
Prototype Pollution in handlebars
High
CVE-2019-19771
lodahs is malware
High
CVE-2019-16777
npm Vulnerable to Global node_modules Binary Overwrite
High
CVE-2019-16776
npm symlink reference outside of node_modules
High
CVE-2019-16775
Arbitrary File Write in npm
Critical
CVE-2019-10769
Sandbox Breakout / Arbitrary Code Execution in safer-eval
Low
CVE-2019-16772
Cross-Site Scripting in serialize-to-js
Medium
CVE-2019-16769
Cross-Site Scripting in serialize-javascript
Medium
CVE-2019-19507
Validation bypass is possible in Json Pattern Validator
Critical
CVE-2019-18818
Strapi allows unauthenticated attacker to reset admin password without valid reset token
Medium
CVE-2019-18954
Pomelo allows external control of critical state data
Medium
CVE-2019-10771
Cross-Site Scripting in iobroker.web
High
CVE-2019-10767
Arbitrary File Write in iobroker.js-controller
High
CVE-2019-18841
Prototype Pollution in chartkick
Medium
CVE-2019-16763
Pannellum Cross-Site Scripting due to data not being sanitized for URIs or vbscript
High
ghsa-9xr8-8hmc-389f
Cross-Site Scripting in vant
High
CVE-2019-10768
angular Prototype Pollution vulnerability
Critical
CVE-2019-16762
Critical severity vulnerability that affects slpjs
Critical
CVE-2019-16761
Validation Bypass in slp-validate
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.