Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,499
Reset filtersRegular Expression Denial of Service (ReDoS)
Prototype Pollution in lutils-merge
Parse Server before v3.4.1 vulnerable to Denial of Service
Unauthorized File Access in harp
Unauthorized File Access in harp
Command Injection in fs-path
Out-of-bounds Read in npmconf
SQL Injection in sql
Path Traversal in localhost-now
Remote Code Execution in node-os-utils
Path Traversal in m-server
Denial of Service in http-proxy-agent
Prototype Pollution in querystringify
Regular Expression Denial of Service
Rate Limiting Bypass in express-brute
express-basic-auth Timing Attack due to native string comparison instead of constant time string comparison
Prototype Pollution in upmerge
Insecure Default Configuration in redbird
Regular Expression Denial of Service in remarkable
Signature Verification Bypass in jwt-simple
Path Traversal in servey
SQL Injection in typeorm
Command Injection in dot
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.