Critical
CVE-2022-35924
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 537
Reset filters
High
CVE-2022-31127
Improper handling of email input
High
CVE-2022-31093
Improper Handling of `callbackUrl` parameter in next-auth
Medium
CVE-2021-4231
Angular vulnerable to Cross-site Scripting
Medium
CVE-2022-29229
Missing Cryptographic Step in cassproject
Medium
CVE-2022-29214
URL Redirection to Untrusted Site ('Open Redirect') in next-auth
High
CVE-2018-7408
Incorrect Permission Assignment for Critical Resource in NPM
Medium
CVE-2022-24858
NextAuth.js default redirect callback vulnerable to open redirects
Medium
CVE-2022-23646
Improper CSP in Image Optimization API for Next.js versions between 10.0.0 and 12.1.0
Medium
CVE-2022-21721
Denial of Service Vulnerability in next.js
High
CVE-2022-0087
Reflected cross-site scripting (XSS) vulnerability
Medium
CVE-2021-43812
Open redirect in @auth0/nextjs-auth0
High
CVE-2021-43803
Unexpected server crash in Next.js.
Medium
CVE-2021-41183
XSS in `*Text` options of the Datepicker widget in jquery-ui
High
CVE-2021-41117
Insecure random number generation in keypair
High
CVE-2021-39178
XSS in Image Optimization API for Next.js
Medium
CVE-2021-37699
Open Redirect in Next.js
Low
ghsa-xh2p-7p87-fhgh
Incorrect TCR calculation in batchLiquidateTroves() during Recovery Mode
High
CVE-2021-32702
Reflected XSS from the callback handler's error query parameter
Medium
CVE-2021-29438
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in @nextcloud/dialogs
Low
CVE-2021-21310
Token verification bug in next-auth
Medium
CVE-2020-15242
Open Redirect in Next.js versions
High
ghsa-5vj8-3v2h-h38v
Remote Code Execution in next
High
ghsa-whv6-rj84-2vh2
Cross-Site Scripting in nextcloud-vue-collections
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.