Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,493
Reset filtersTotal.js CMS RCE Vulnerability
Total.js CMS Path Traversal
Crash in HeaderParser in dicer
mxGraph vulnerable to XXE attacks
statics-server Cross-site Scripting vulnerability
Cross site scripting in code-server
Improper handling of multiline messages in node-irc
Authentication bypass and denial of service (DoS) vulnerabilities in Apple Game Center auth adapter
RCE in SiteServer CMS
ejs template injection vulnerability
Prototype Pollution in convict
Express-FileUpload Arbitrary File Overwrite
Cross-site Scripting in tableexport.jquery.plugin
Denial of Service vulnerability in @podium/layout and @podium/proxy
Path Traversal: 'dir/../../filename' in moment.locale
Server-Side Request Forgery in FUXA
Sudden swap of user auth tokens in Volto
Command injection in Parse Server through prototype pollution
Incorrect Authorization in @uppy/companion
Cross-site Scripting in Prism
Prototype Pollution in litespeed.js and appwrite/server-ce
Open Redirect in koa-remove-trailing-slashes
Arbitrary Code Execution in Handlebars
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.