Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filtersImproper Input Validation in strapi
MJML vulnerable to path traversal
chrome-launcher subject to OS Command Injection
Diavante vue-storefront-api and storefront-api disclose stack trace
Clamscan vulnerable to command injection
xdlocalstorage does not verify request origin
Improper Control of Generation of Code in doT
Improper Neutralization of Special Elements used in an OS Command in Blamer
promise-probe OS command injection vulnerability
component-flatten vulnerable to Prototype Pollution
Improper Neutralization of Special Elements in Output Used by a Downstream Component in Codecov
HashBrown CMS RCE
HashBrown CMS Directory Traversal
Improper Neutralization of Input During Web Page Generation in swagger-ui
Treekill Enables OS Command Injection
GitBook allows Cross-site Scripting via a local .md file.
Cezerin Unauthorized Acces
hexo-admin plugin for Node.js XSS Vulnerability
Rambox RCE Vulnerability
Total.js CMS RCE Vulnerability
Total.js CMS Unauthorized Access
Total.js CMS Path Traversal
MySQL for Node.js Unsafe Options
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.