Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,474
Reset filtersRegular Expression Denial of Service in ansi2html
Regular Expression Denial of Service in bleach
Denial of Service in yar
Regular Expression Denial of Service in validator
Command Injection in ungit
API Admin Auth Weakness in tomato
Directory Traversal in st
Open Redirect in serve-static
Content Injection in remarkable
Validation Bypass in paypal-ipn
Directory Traversal in nhouston
Multiple Content Injection Vulnerabilities in marked
Heap Based Buffer Overflow in libyaml
Potential Command Injection in libnotify
LDAP Injection in ldapauth
CSRF Vulnerability in jquery-ujs
Hidden Directories Always Served in inert
Potential Command Injection in hubot-scripts
Rosetta-Flash JSONP Vulnerability in hapi
Directory Traversal in fancy-server
Unauthenticated Remote Command Injection in ep_imageconvert
DataTable Vulnerable to Cross-Site Scripting
methodOverride Middleware Reflected Cross-Site Scripting in connect
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.