Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,474
Reset filtersMissing Origin Validation in webpack-dev-server
Unrestricted Upload of File with Dangerous Type in jquery-file-upload
Path Traversal in simplehttpserver
Critical severity vulnerability that affects event-stream and flatmap-stream
Denial of Service in ethereumjs-vm
SimpleMDE XSS Vulnerability
Cross-site Scripting in yapi-vendor
Ckeditor XSS Vulnerability
Valine HTML Injection
Header Forgery in http-signature
sqlserver is malware
Cross-Site Scripting in html-janitor
windows-build-tools downloads Resources over HTTP
Content Injection via TileJSON Name in mapbox.js
XSS in Data URI in remarkable
Insufficient Error Handling in http-proxy
Content Injection via TileJSON attribute in mapbox.js
Cross-Site Scripting in sanitize-html
Cross-Site Scripting in i18next
Cross-Site Scripting in morris.js
Cross-Site Scripting in forms
Cross-Site Scripting in sanitize-html
Cross-Site Scripting (XSS) in restify
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.