Medium
CVE-2018-16474
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,458
Reset filters
High
CVE-2018-16475
Path Traversal in knightjs
Medium
CVE-2018-16461
Command Injection in libnmap
Critical
CVE-2018-16462
Command Injection in apex-publish-static-files
High
CVE-2017-16062
node-tkinter is malware
High
CVE-2017-16061
tkinter is malware
High
CVE-2018-16469
Prototype Pollution in merge
High
CVE-2018-14731
Missing Origin Validation in parcel-bundler
Medium
CVE-2014-6393
No Charset in Content-Type Header in express
Medium
CVE-2015-8861
Cross-Site Scripting in handlebars
High
CVE-2016-10533
Private Data Disclosure in express-restify-mongoose
Critical
CVE-2018-15494
dojox vulnerable to unescaped string injection
Medium
CVE-2018-18282
Next.js has cross site scripting (XSS) vulnerability via the 404 or 500 /_error page
Critical
CVE-2018-9206
Tajer <= 1.0.5 - Arbitrary File Upload
Medium
CVE-2016-1000232
ReDoS via long string of semicolons in tough-cookie
High
CVE-2017-16077
mongose is malware
High
CVE-2017-16064
node-openssl is malware
Medium
CVE-2018-3747
Cross-Site Scripting in public
Critical
CVE-2018-3767
Denial of Service in memjs
High
CVE-2017-16013
Denial of Service via malformed accept-encoding header in hapi
Medium
CVE-2017-16028
Cryptographically Weak PRNG in randomatic
Critical
CVE-2018-3745
Out-of-bounds Read in atob
Critical
CVE-2018-3750
Prototype Pollution in deep-extend
High
CVE-2016-10540
Regular Expression Denial of Service in minimatch
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.