High
CVE-2022-39251
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,621
Reset filters
Medium
CVE-2022-39236
Improper beacon events in matrix-js-sdk can result in availability issues
Low
CVE-2022-36036
Improper Control of Generation of Code ('Code Injection') in mdx-mermaid
Medium
CVE-2022-36046
Next.js is a React framework that can provide building blocks to create web applications. All of the following must be true to be affected by this CVE: Next.js version 12.2.3, Node.js version above v1
Critical
CVE-2022-36045
Cryptographically weak PRNG in `utils.generateUUID`
Low
ghsa-56x4-j7p9-fcf9
Command Injection in moment-timezone
Medium
CVE-2022-35916
OpenZeppelin Contracts's Cross chain utilities for Arbitrum L2 see EOA calls as cross chain calls
Medium
CVE-2022-35915
OpenZeppelin Contracts ERC165Checker unbounded gas consumption
Medium
CVE-2022-31175
CKEditor5 cross-site scripting vulnerability caused by the editor instance destroying process
Low
CVE-2022-31186
next-auth before v4.10.2 and v3.29.9 leaks excessive information into log
Critical
CVE-2022-25759
convert-svg-core vulnerable to remote code injection
High
CVE-2022-31172
OpenZeppelin Contracts's SignatureChecker may revert on invalid EIP-1271 signers
High
CVE-2022-31170
OpenZeppelin Contracts's ERC165Checker may revert instead of returning false
Low
CVE-2022-31151
undici before v5.8.0 vulnerable to uncleared cookies on cross-host / cross-origin redirect
Medium
CVE-2022-31160
jQuery UI vulnerable to XSS when refreshing a checkboxradio with an HTML-like initial text label
Medium
CVE-2022-25869
Angular (deprecated package) Cross-site Scripting
Critical
CVE-2022-31180
Shescape vulnerable to insufficient escaping of whitespace
High
CVE-2022-31179
Shescape prior to 1.5.8 vulnerable to insufficient escaping of line feeds for CMD
Low
CVE-2022-25858
terser (JS Package) < 5.14.2 - Denial of Service
High
CVE-2022-31127
Improper handling of email input
High
CVE-2022-31129
Moment.js vulnerable to Inefficient Regular Expression Complexity
Medium
CVE-2022-31108
Possible inject arbitrary `CSS` into the generated graph affecting the container HTML
High
CVE-2022-31093
Improper Handling of `callbackUrl` parameter in next-auth
High
CVE-2022-21213
Prototype Pollution in mout
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.