High
CVE-2016-10690
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
High
CVE-2016-10559
Downloads Resources over HTTP in selenium-download
High
CVE-2016-10557
appium-chromedriver downloads Resources over HTTP
Low
CVE-2016-10552
Resources Downloaded over Insecure Protocol in igniteui
High
CVE-2016-10549
Sails before 0.12.7 vulnerable to Broken CORS
Medium
CVE-2016-10543
Route Validation Bypass in call
Low
CVE-2016-10538
Arbitrary File Write in cli
Medium
CVE-2016-10537
Cross-Site Scripting in backbone
Medium
CVE-2016-10536
Insecure Defaults Allow MITM Over TLS in engine.io-client
High
CVE-2016-10535
Timing Attack in csrf-lite
Critical
CVE-2016-10532
Authentication Bypass in console-io
High
CVE-2016-10529
No CSRF Validation in droppy
Medium
CVE-2016-10528
Directory Traversal in restafary
High
CVE-2016-10527
Regular Expression Denial of Service in riot-compiler
Medium
CVE-2016-10526
grunt-gh-pages before 0.10.0 may allow unencrypted GitHub credentials to be written to a log file
High
CVE-2016-10524
Denial of Service and Content Injection in i18n-node-angular
Critical
CVE-2016-10525
Authentication Bypass in hapi-auth-jwt2
High
CVE-2016-10521
Regular Expression Denial of Service in jshamcrest
High
CVE-2016-10523
Denial of Service in mqtt-packet
Low
CVE-2016-10520
Regular Expression Denial of Service in jadedown
Medium
CVE-2016-10561
Directory Traversal in bitty
High
CVE-2016-10565
Downloads Resources over HTTP in operadriver
High
CVE-2016-10567
Downloads Resources over HTTP in product-monitor
High
CVE-2016-10569
Downloads Resources over HTTP in embedza
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.