Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Prototype Pollution in jointjs
Regular Expression Denial of Service in millisecond
Regular Expression Denial of Service in Leo Editor
Response Splitting from unsanitized headers
Path Traversal in serve-here.js
Denial of Service in node-static
drupal/tb_megamenu - SA-CONTRIB-2021-041
drupal/tb_megamenu - SA-CONTRIB-2021-040
drupal/tb_megamenu - SA-CONTRIB-2021-039
drupal/tb_megamenu - SA-CONTRIB-2021-038
drupal/domain_group - SA-CONTRIB-2021-037
drupal/miniorange_saml - SA-CONTRIB-2021-036
drupal/taxonomy_manager - SA-CONTRIB-2021-035
drupal/file_extractor - SA-CONTRIB-2021-033
drupal/commerce - SA-CONTRIB-2021-032
drupal/cshs - SA-CONTRIB-2021-031
drupal/user_hash - SA-CONTRIB-2021-030
Ninja Forms <= 3.5.7 - Unprotected REST-API to Email Injection
Ninja Forms <= 3.5.7 - Unprotected REST-API to Sensitive Information Disclosure
Improper Input Validation and Command Injection in Ansible
Easy Media Download <= 1.1.5 - Contributor+ Stored Cross-Site Scripting
WP User Manager <= 2.6.2 - Arbitrary User Password Reset
Cookie Bar <= 1.8.8 - Admin+ Stored Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.