Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 5,032
Reset filtersMJML vulnerable to path traversal
Clamscan vulnerable to command injection
xdlocalstorage does not verify request origin
Cezerin Unauthorized Acces
Total.js CMS RCE Vulnerability
Total.js CMS Path Traversal
Uncontrolled Resource Consumption in Hawk
Improper handling of multiline messages in node-irc affects matrix-appservice-irc
Improper Removal of Sensitive Information Before Storage or Transfer in Strapi
Improper Removal of Sensitive Information Before Storage or Transfer in Strapi
Converse.js Exposure of Sensitive Information
Joplin Vulnerable to Cross-site Scripting in Note Content
Auth0 angular-jwt misinterprets allowlist as regex
PIDUsage Enables OS Command Injection
express-cart unrestricted file upload vulnerability
statics-server Cross-site Scripting vulnerability
Nuclide Improper Input Validation
Node Connect Reflected Cross-Site Scripting in Sencha Labs Connect middleware
Insecure password handling vulnerability in Strapi
Privilege Issues in jailed
Prototype Pollution in dset
angular vulnerable to regular expression denial of service (ReDoS)
tagify can pass a malicious placeholder to initiate the cross-site scripting (XSS) payload
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.