Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filtersPrototype Pollution in minimist
Server-Side Request Forgery in FUXA
Unhandled case in node-lmdb
Cross-site Scripting in sanitize-url
node-ipc behavior change
Hidden functionality in node-ipc
Embedded Malicious Code in node-ipc
Drupal core - SA-CORE-2022-005
Cross-site Scripting in vditor
Inconsistent storage layout for ERC2771ContextUpgradeable
Leaking of user information on Cross-Domain communication in sysend
Sudden swap of user auth tokens in Volto
Spoofing attack in swagger-ui
Spoofing attack in swagger-ui-dist
Command injection in simple-git
Improper Input Validation in url-js
Command injection in Parse Server through prototype pollution
WordPress Core < 5.9.1 - jQuery Prototype Pollution
Open Redirect in urijs
OS Command Injection in GenieACS
Incorrect Authorization in @uppy/companion
OS Command injection in npm-lockfile
Exposure of home directory through shescape on Unix with Bash
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.