Medium
CVE-2023-48223
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 921
Reset filters
High
CVE-2023-48238
json-web-token library is vulnerable to a JWT algorithm confusion attack
Medium
CVE-2023-46998
Bootbox.js Cross Site Scripting vulnerability
Medium
CVE-2023-45818
TinyMCE mXSS vulnerability in undo/redo, getContent API, resetContent API, and Autosave plugin
Medium
CVE-2023-43794
nocodb SQL Injection vulnerability
Critical
CVE-2023-26045
Path traversal and code execution via prototype vulnerability
Low
CVE-2023-35931
Shescape potential environment variable exposure on Windows with CMD
High
CVE-2023-34232
Snowflake NodeJS Driver vulnerable to Command Injection
Medium
CVE-2023-32688
Invalid push request payload crashes Parse Server
Medium
CVE-2023-30094
Cross-site scripting in TotalJS
High
CVE-2023-30843
Hidden fields can be leaked on readable collections in Payload
High
CVE-2023-30609
HTML injection in search results via plaintext message highlighting
Medium
CVE-2023-2142
Nunjucks autoescape bypass leads to cross site scripting
Critical
CVE-2023-22621
Strapi plugins vulnerable to Server-Side Template Injection and Remote Code Execution in the Users-Permissions Plugin
High
Exploited in attacks
CVE-2023-22894
Strapi leaking sensitive user information by filtering on private fields
Medium
CVE-2021-32855
Vditor Cross-site Scripting vulnerability
Medium
CVE-2021-32854
textAngular Cross-site Scripting vulnerability
High
CVE-2023-22491
gatsby-transformer-remark has possible unsanitized JavaScript code injection
Critical
CVE-2022-46164
NodeBB vulnerable to account takeover via prototype vulnerability
High
CVE-2022-24999
qs vulnerable to Prototype Pollution
Critical
CVE-2022-2421
Insufficient validation when decoding a Socket.IO packet
Medium
CVE-2022-39350
@dependencytrack/frontend vulnerable to Persistent Cross-Site-Scripting via Vulnerability Details
High
CVE-2022-35923
v8n vulnerable to Inefficient Regular Expression Complexity
Critical
CVE-2022-39266
isolated-vm has vulnerable CachedDataOptions in API
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.