Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 5,013
Reset filtersDenial of Service in ws
NoSQL Injection in loopback-connector-mongodb
Sensitive Data Exposure in pem
Cross-Site Scripting in public
Cross-Site Scripting in bracket-template
Insecure Credential Storage in web3
Arbitrary File Overwrite in fstream
Directory Traversal in ltt.js
Server-Side Request Forgery in terriajs-server
Cross-Site Scripting in shave
Cryptographically Weak PRNG in generate-password
Arbitrary File Overwrite in tar
Improper Input Validation in tar-fs
XSS in jQuery as used in Drupal, Backdrop CMS, and other products
Cross-Site Scripting in simple-markdown
Materialize-css vulnerable to Cross-site Scripting in tooltip component
Materialize-css vulnerable to Cross-site Scripting in autocomplete component
Cross-Site Scripting in buttle
Path Traversal in serve
Path Traversal in localhost-now
Cross-Site Scripting in editor.md
uap-core Regular Expression Denial of Service issue
Sanitization bypass using HTML Entities in marked
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.