High
CVE-2022-32210
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,621
Reset filters
High
CVE-2021-34081
OS Command Injection in gitsome
High
CVE-2022-29244
Packing does not respect root-level ignore files in workspaces
High
CVE-2022-29219
AttesterSlashing number overflow
Medium
CVE-2022-29214
URL Redirection to Untrusted Site ('Open Redirect') in next-auth
High
CVE-2019-17221
PhantomJS Arbitrary File Read
Critical
CVE-2021-25915
Changeset vulnerable to prototype pollution
Medium
CVE-2020-26768
Formstone Vulnerable to Reflected XSS
Critical
CVE-2020-28272
keyget vulnerable to prototype pollution
High
CVE-2020-11610
xdlocalstorage does not verify request origin
Medium
CVE-2022-29230
Potential Cross-site Scripting vulnerability in Hydrogen
Critical
CVE-2022-21190
Prototype Pollution in convict
Medium
CVE-2018-6464
Simditor XSS Vulnerability
Medium
CVE-2018-14040
Bootstrap vulnerable to Cross-Site Scripting (XSS)
Medium
CVE-2022-24858
NextAuth.js default redirect callback vulnerable to open redirects
Low
ghsa-3mpp-xfvh-qh37
node-ipc behavior change
Medium
CVE-2022-24728
Drupal core - SA-CORE-2022-005
Critical
CVE-2022-24760
Command injection in Parse Server through prototype pollution
High
ghsa-v3wr-67px-44xg
Execution with Unnecessary Privileges in arc-electron
Medium
CVE-2022-23646
Improper CSP in Image Optimization API for Next.js versions between 10.0.0 and 12.1.0
Medium
CVE-2019-20903
Cross-site scripting in @atlaskit/editor-core
Critical
CVE-2019-10803
push-dir Enables OS Command Injection
High
CVE-2020-7792
Prototype Pollution in mout
Medium
CVE-2022-21721
Denial of Service Vulnerability in next.js
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.