Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filtersDrupal core - SA-CORE-2021-003
eivindfjeldstad-dot contains prototype pollution vulnerability
apiconnect-cli-plugins vulnerable to OS Command Injection
Prototype Pollution in jquery-deparam
Improper Certificate Validation in xmlhttprequest-ssl
Regular Expression Denial of Service in browserslist
Prototype Pollution in jquery-bbq
Potential memory exposure in dns-packet
Uncontrolled Resource Consumption in firebase
Prototype pollution in controlled-merge
Cross-site Scripting in docsify
Credential leak in react-native-fast-image
Path traversal in rollup-plugin-serve
Injection and Command Injection in devcert
Cross-site scripting in jspdf
Cross-site scripting in @shopify/koa-shopify-auth
Cross-site scripting in TileServer GL
OS Command Injection in mversion
OS Command Injection in wifiscanner
Improperly Controlled Modification of Dynamically-Determined Object Attributes in casperjs
Code Injection in node-extend
Improper Input Validation in access-policy
Code Injection in cd-messenger
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.