Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,474
Reset filtersejs vulnerable to DoS due to weak input validation
Regular Expression Denial of Service in moment
ReDoS in brace-expansion
Directory traversal vulnerability in Next.js
Remote Code Execution in electron
Denial of Service in jquery
Cross-Site Scripting (XSS) in jquery
Marked vulnerable to XSS from data URIs
Samlify vulnerable to Authentication Bypass by allowing tokens to be reused with different usernames
Denial of Service in ecstatic
Denial of Service in mqtt
auth0-js Privilege Escalation Vulnerability
Arbitrary Code Execution in mathjs
Arbitrary Code Execution in mathjs
Next.js Directory Traversal Vulnerability
ejs is vulnerable to remote code execution due to weak input validation
mde ejs vulnerable to XSS
Cross-Site Request Forgery (CSRF) in keystone
Potential Command Injection in printer
Potential Command Injection in codem-transcode
Cross-Site Scripting in keystone
Keystone is vulnerable to CSV injection
keycloak-connect and keycloak-js improperly handle invalid tokens
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.