Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,563
dns-sync command injection vulnerability
Arbitrary JavaScript Execution in bassmaster
CORS Token Disclosure in crumb
Potential for Script Injection in syntax-error
Denial-of-Service Memory Exhaustion in qs
Directory Traversal in send
File Descriptor Leak Can Cause DoS Vulnerability in hapi
Multiple XSS Filter Bypasses in validator
Moderate severity vulnerability that affects validator
Moderate severity vulnerability that affects validator
Moderate severity vulnerability that affects validator
Regular Expression Denial of Service in is-my-json-valid
jQuery-UI vulnerable to Cross-site Scripting in dialog closeText
Cross Site Scripting (XSS) in plotly.js
Regular Expression Denial of Service in moment
High severity vulnerability that affects electron
HDW Player - RCE
JS Jobs - RCE
Pallets Werkzeug cross-site scripting vulnerability
WordCamp Talks < 1.0.0 Beta3 - CSV Injection
Ultimate Form Builder Lite <= 1.3.6 - SQL Injection to PHP Object Injection
CMS Tree Page View < 1.4 - Missing Authorization Checks
Google Maps by Reumer - Malicious update
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.