Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,125
Reset filtersInsecure defaults in UmbracoForms
Cross-Site Scripting in jquery
jQuery Manager for WordPress <= 1.10.4 & jQuery Migrate Helper <= 1.4.1- Running Vulnerable Dependency
Potential XSS vulnerability in jQuery
Subject Confirmation Method not validated in Saml2 Authentication Services for ASP.NET
Internal NCryptDecrypt method could be used externally from WindowsHello library.
Missing Token Replay Detection in Saml2 Authentication services for ASP.NET
Untrusted data can lead to DoS attack due to hash collisions and stack overflow in MessagePack
Stored Cross-Site Scripting vulnerability in admin component of DotNetNuke
Improper Authentication in Auth0.AuthenticationApi
High severity vulnerability that affects PeterO.Cbor
High severity vulnerability that affects System.Management.Automation
Directory Traversal in SharpCompress
Uncontrolled Resource Consumption in MetadataExtractor
Vulnerability in Azure Active Directory Authentication Library
Cross-site scripting in CLEditor
System.Management.Automation subject to bypass via script debugging
MadsKristensen.AspNetCore.Miniblog subject to Improper Input Validation
Inadequate Encryption Strength in DotNetNuke
Insufficient Entropy in DotNetNuke
Insufficient Entropy in DotNetNuke
Inadequate Encryption Strength in DotNetNuke
Low severity vulnerability that affects Gw2Sharp
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.