Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,491
Reset filtersInjection and Cross-site Scripting in osm-static-maps
Cross-site Scripting in lightning-server
Server-Side Request Forgery in node-pdf-generator
Server-Side Request Forgery in phantomjs-seo
Path traversal in servey
Server-side request forgery in Ghost CMS
Code injection in mock2easy
cumulative-distribution-function Infinite Loop vulnerability
Code Injection in oauth2-server
Any logged in user could edit any other logged in user.
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in @nextcloud/dialogs
Server-Side Request Forgery and Inclusion of Functionality from Untrusted Control Sphere in jsreport
Server-Side Request Forgery in private-ip
mongodb-client-encryption vulnerable to Improper Certificate Validation
Client TLS credentials sent raw to server in npm package nats
Vulnerability allowing for reading internal HTTP resources
Misinterpretation of malicious XML input
Verification flaw in Solid identity-token-verifier
Prefix escape
Prefix escape
SSRF in Rendertron
File System Bounds Escape
Open redirect in Slashify
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.