Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,474
Reset filtersopenssl.js is malware
nodemailer.js is malware
nodemailer-js is malware
nodecaffe is malware
nodeffmpeg is malware
Directory Traversal in easyquick
smb is malware
Hijacked Environment Variables in proxy.js
http-proxy.js is malware
crossenv is malware
Regular Expression Denial of Service in timespan
Shadowsock is malware
Electron webPreferences vulnerability can be used to perform remote code execution
Privilege Escalation due to Blind NoSQL Injection in flintcms
Command Injection in git-dummy-commit
Code Injection in cryo
Downloads Resources over HTTP in haxe3
fis-sass-all downloads Resources over HTTP
Improper Authorization in aedes
Downloads Resources over HTTP in cmake
Downloads Resources over HTTP in jstestdriver
slimerjs-edge downloads Resources over HTTP
grunt-images downloads Resources over HTTP
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.