Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 14
Reset filtersSignal K Server's WebSocket Login Endpoint Lacks Rate Limiting (Credential Brute-Force)
Signal K Server has an Unauthenticated Regular Expression Denial of Service (ReDoS) via WebSocket Subscription Paths
Signal K Server: OAuth Authorization Code Theft via Unvalidated Host Header in OIDC Flow
Signal K Server: Unauthenticated Source Priorities Manipulation
Signal K Server: Privilege Escalation by Admin Role Injection via /enableSecurity
Signal K Server: Arbitrary Prototype Read via `from` Field Bypass
SignalK Server has Path Traversal leading to information disclosure
Signal K Server vulnerable to JWT Token Theft via WebSocket Enumeration and Unauthenticated Polling
Signal K Server Vulnerable to Access Request Spoofing
Signal K Server Vulnerable to Remote Code Execution via Malicious npm Package
Signal K Server Vulnerable to Unauthenticated Information Disclosure via Exposed Endpoints
Signal K Server Vulnerable to Denial of Service via Unrestricted Access Request Flooding
Signal K Server has Unauthenticated State Pollution leading to Remote Code Execution (RCE)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.