Critical
CVE-2018-14505
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2017-16007
Invalid Curve Attack in node-jose
High
CVE-2017-16138
mime Regular Expression Denial of Service when MIME lookup performed on untrusted user input
Medium
CVE-2018-14430
Multi Step Form <= 1.2.5 - Reflected Cross-Site Scripting
Critical
CVE-2017-7481
Ansible fails to properly mark lookup-plugin results as unsafe
High
CVE-2018-3711
Denial of Service vulnerability with large JSON payloads in fastify
High
CVE-2018-3731
Path Traversal in public
High
CVE-2018-3732
Path Traversal in resolve-path
High
CVE-2018-3733
Path Traversal in crud-file-server
High
CVE-2018-3734
Path Traversal in stattic
Medium
CVE-2018-3743
Open Redirect in hekto
Medium
CVE-2018-3726
Cross-site Scripting (XSS) - Stored in crud-file-server
Medium
CVE-2018-3809
Information Exposure on Case Insensitive File Systems in serve
Critical
CVE-2017-16088
Sandbox Breakout in safe-eval
Critical
CVE-2017-16100
Command Injection in dns-sync
Critical
CVE-2017-5941
Code Execution through IIFE in node-serialize
Critical
CVE-2017-5954
Code Execution Through IIFE in serialize-to-js
Medium
CVE-2018-13137
Events Manager <= 5.9.4 - Cross-Site Scripting
Medium
CVE-2018-21001
AnyComment <= 0.0.32 - Cross-Site Scripting
Medium
CVE-2018-14071
Geo Mashup - < 1.10.4 - Cross-Site Scripting
Unrated
633
Kunena - Other
High
CVE-2017-2809
An exploitable vulnerability exists in the yaml loading functionality of ansible-vault before 1.0.5. A specially crafted vault can execute arbitrary python commands resulting in command execution. An
Critical
ghsa-hxxf-q3w9-4xgw
Malicious Package in eslint-scope
High
CVE-2018-10895
Qutebrowser CSRF Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.