Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,472
Reset filtersDownloads Resources over HTTP in google-closure-tools-latest
Downloads Resources over HTTP in serc.js
Downloads Resources over HTTP in arcanist
Downloads Resources over HTTP in healthcenter
Downloads Resources over HTTP in pk-app-wonderbox
Downloads Resources over HTTP in windows-iedriver
openframe-ascii-image downloads Resources over HTTP
Downloads Resources over HTTP in selenium-download
appium-chromedriver downloads Resources over HTTP
Resources Downloaded over Insecure Protocol in igniteui
Sails before 0.12.7 vulnerable to Broken CORS
Route Validation Bypass in call
Arbitrary File Write in cli
Cross-Site Scripting in backbone
Insecure Defaults Allow MITM Over TLS in engine.io-client
Timing Attack in csrf-lite
Authentication Bypass in console-io
No CSRF Validation in droppy
Directory Traversal in restafary
Regular Expression Denial of Service in riot-compiler
grunt-gh-pages before 0.10.0 may allow unencrypted GitHub credentials to be written to a log file
Denial of Service and Content Injection in i18n-node-angular
Authentication Bypass in hapi-auth-jwt2
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.