Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 921
Reset filtersAngular Expressions - Remote Code Execution
XSS in hello.js
Hostname spoofing via backslashes in URL
ini before 1.3.6 vulnerable to Prototype Pollution via ini.parse
Command Injection in wizard-syncronizer
Remote Code Execution in mongodb-query-parser
Sandbox Breakout / Arbitrary Code Execution in localeval
Sandbox Breakout / Prototype Pollution in notevil
Sandbox Breakout / Arbitrary Code Execution in veval
Sandbox Breakout / Arbitrary Code Execution in @zhaoyao91/eval-in-vm
Sandbox Breakout / Arbitrary Code Execution in pitboss-ng
Sandbox Breakout / Arbitrary Code Execution in sandbox
Sandbox Breakout / Arbitrary Code Execution in lighter-vm
Cross-Site Scripting in markdown-to-jsx
Denial of Service in subtext
Denial of Service in @commercial/subtext
Denial of Service in @hapi/subtext
Prototype Pollution in mithril
Sandbox Breakout / Arbitrary Code Execution in notevil
Cross-Site Scripting in console-feed
Cross-Site Scripting in jquery.json-viewer
Cross-Site Scripting in bleach
Sandbox Breakout / Arbitrary Code Execution in safe-eval
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.