Critical
CVE-2016-1000282
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2018-20242
Cross-site Scripting in jspwiki-war
High
CVE-2017-18355
Rendertron discloses absolute paths of files
High
CVE-2018-16202
Path Traversal in cordova-plugin-ionic-webview
Medium
2db0f9b6-fa03-4dea-b47d-ea070e6d1c4c
Superlist - Directory WordPress Theme | Directory & Listings <= 2.9.2 - Stored Cross-Site Scripting
High
CVE-2019-6975
Uncontrolled Memory Consumption in Django
Medium
1bda01a0-e995-4642-81e3-4a72e6754af6
Simple Social Media Share Buttons 2.0.4 - 2.0.21 - Missing Authorization
High
CVE-2018-16493
Path Traversal in simplehttpserver
Critical
CVE-2018-16491
Prototype Pollution in node.extend
High
CVE-2018-16490
Prototype Pollution in mpath
Critical
CVE-2018-16489
Prototype Pollution in just-extend
High
CVE-2018-16487
Prototype Pollution in lodash
Critical
CVE-2018-16486
Prototype Pollution in defaults-deep
Medium
CVE-2018-16484
Cross-Site Scripting in m-server
High
CVE-2018-16483
Authentication Bypass by Spoofing in express-cart
High
CVE-2018-16482
mcstatic directory traversal vulnerability
Medium
CVE-2018-16481
Cross-Site Scripting in html-pages
Medium
CVE-2018-16480
Tnantoka/public XSS Vulnerability
High
CVE-2018-16479
Path Traversal in http-live-simulator
Medium
CVE-2018-16492
Prototype Pollution in extend
High
CVE-2019-7560
Boolector use after free
Critical
CVE-2019-7548
SQLAlchemy is vulnerable to SQL Injection via group_by parameter
Unrated
drupal-contrib-2019-014
drupal/acquia_connector - SA-CONTRIB-2019-014
Unrated
drupal-contrib-2019-013
drupal/login_alert - SA-CONTRIB-2019-013
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.