Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,501
Reset filtersKeystone is vulnerable to CSV injection
keycloak-connect and keycloak-js improperly handle invalid tokens
Cross-Site Scripting in keystone
Cross-site Scripting in jquery-ui
jquery-ui Tooltip widget vulnerable to XSS
Deserialization Code Execution in js-yaml
Regular Expression Denial of Service in semver
Regular Expression Denial of Service in ms
Incorrect Handling of Non-Boolean Comparisons During Minification in uglify-js
Regular Expression Denial of Service in marked
Cross-Site Scripting in mustache
Symlink Arbitrary File Overwrite in tar
Root Path Disclosure in send
Regular Expression Denial of Service in uglify-js
Cross-Site Scripting in serve-index
Directory Traversal in geddy
VBScript Content Injection in marked
SQL Injection in sequelize
dns-sync command injection vulnerability
Arbitrary JavaScript Execution in bassmaster
CORS Token Disclosure in crumb
Potential for Script Injection in syntax-error
Denial-of-Service Memory Exhaustion in qs
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.