Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,482
Reset filtersInsecure Defaults Allow MITM Over TLS in engine.io-client
Timing Attack in csrf-lite
Authentication Bypass in console-io
No CSRF Validation in droppy
Directory Traversal in restafary
Regular Expression Denial of Service in riot-compiler
grunt-gh-pages before 0.10.0 may allow unencrypted GitHub credentials to be written to a log file
Denial of Service and Content Injection in i18n-node-angular
Authentication Bypass in hapi-auth-jwt2
Regular Expression Denial of Service in jshamcrest
Denial of Service in mqtt-packet
Regular Expression Denial of Service in jadedown
Directory Traversal in bitty
Downloads Resources over HTTP in operadriver
Downloads Resources over HTTP in product-monitor
Downloads Resources over HTTP in embedza
Downloads Resources over HTTP in baryton-saxophone
Downloads Resources over HTTP in kindlegen
steroids downloads resources over HTTP
Downloads Resources over HTTP in libxl
Downloads Resources over HTTP in wasdk
selenium-binaries downloads resources over HTTP
Downloads Resources over HTTP in prince
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.