Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,638
Arbitrary code execution in Magnolia CMS
Uncaught Exception in fastify-multipart
Cross Site Request Forgery in concrete5/concrete5
Cross-site Scripting in microweber
ThinkPHP Remote Code Execution (RCE) vulnerability
Email Subscribers & Newsletters <= 5.3.1 - Authenticated (or Cross-Site Request Forgery) Blind SQL Injection
Prototype Pollution in handlebars
Command injection in git-parse
OS Command Injection in install-package
OS Command Injection in git-add-remote
Open Redirect in koa-remove-trailing-slashes
Cross-site Scripting in vmd
OS Command Injection in node-key-sender
Injection in op-browser
karma-mojo enables OS Command Injection
Cross-site Scripting in aurelia-framework
Code injection in @rkesters/gnuplot
OS Command Injection in jscover
OS Command Injection in strong-nginx-controller
Insecure template handling in Express-handlebars
Time-of-check Time-of-use (TOCTOU) Race Condition in chownr
DOM-based cross-site scripting in Froala Editor
Prototype Pollution in Ajv
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.