The leading open source vulnerability database

Instantly mitigate vulnerabilities in WordPress websites with Patchstack.

See pricing
Rated 4.9
Total56,770
Mitigations19,215
Stats
CVSS0
10
Affected software | Vulnerability
RiskDisclosed
WPIDE – File Manager & Code Editor<= 3.6.4
Cross Site Request Forgery (CSRF) vulnerability
8.8
1 hour ago
@ohif/extension-dicom-pdf>= 3.5.0-beta.0, < 3.12.18
npm: OHIF Viewers: DOM-Based Cross Site Scripting (XSS) through MIME type of document
8.8
1 hour ago
node-forge<= 1.4.0
npm: Forge: Certificate signature verified with the issuer's RSA signature scheme
3.7
1 hour ago
node-forge<= 1.4.0
npm: Forge: Incomplete PKCS#7 padding validation in AES/DES CBC and ECB decryption
3.7
1 hour ago
node-forge<= 1.4.0
npm: Forge: X.509 pathLenConstraint not enforced by verifyCertificateChain() for CA certificates without keyUsage
5.9
1 hour ago
node-forge<= 1.4.0
npm: Forge: ASN.1 resource exhaustion via BIT STRING decoding in asn1.fromDer
7.5
1 hour ago
node-forge<= 1.4.0
npm: Forge: RSA PKCS#1 v1.5 signature forgery via non-canonical DigestInfo encoding
7.5
1 hour ago
effect>= 4.0.0-beta.0, < 4.0.0-beta.103
npm: Effect: Cookie attribute injection via domain, path, and name fields in @effect/platform makeCookie()
6.3
1 hour ago
@effect/platform>= 0.1.0, < 0.97.1
npm: Effect: Cookie attribute injection via domain, path, and name fields in @effect/platform makeCookie()
6.3
1 hour ago
altair-fastify-plugin>= 7.2.4, < 8.5.8
npm: Altair: DOM-based XSS via attacker-controlled script URLs in the iframe sandbox
6.1
1 hour ago
altair-koa-middleware>= 7.2.4, < 8.5.8
npm: Altair: DOM-based XSS via attacker-controlled script URLs in the iframe sandbox
6.1
1 hour ago
altair-express-middleware>= 7.2.4, < 8.5.8
npm: Altair: DOM-based XSS via attacker-controlled script URLs in the iframe sandbox
6.1
1 hour ago
altair-static>= 7.2.4, < 8.5.8
npm: Altair: DOM-based XSS via attacker-controlled script URLs in the iframe sandbox
6.1
1 hour ago
bitcoinjs-lib>= 2.3.0, < 5.2.1
npm: bitcoinjs-lib: Undetected merkle node duplication in block root computation validates a forged transaction list
9.3
1 hour ago
@nuxt/content>= 3.0.0, < 3.15.2
npm: Nuxt Content: Unauthenticated SQLite Function DoS via Content Query API
7.5
1 hour ago
node-opcua-server>= 2.42.0, < 2.180.0
Anonymous Write/Call Bypass via Unbound `DefaultRolePermissions
9.1
1 hour ago
node-opcua-address-space>= 2.42.0, < 2.180.0
Anonymous Write/Call Bypass via Unbound `DefaultRolePermissions
9.1
1 hour ago
node-opcua>= 2.42.0, < 2.180.0
Anonymous Write/Call Bypass via Unbound `DefaultRolePermissions
9.1
1 hour ago
Basel Post Types<= 1.18
Unauthenticated Authentication Bypass vulnerability
9.8
7 hours ago
Everest Forms<= 3.6.3
Unauthenticated Arbitrary File Read vulnerability
7.5
8 hours ago