Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Cross-site Scripting in OpenCart
SQL Injection in pimcore
Cross-site scripting in ThinkAdmin
Cross-site scripting in phpoffice/phpspreadsheet
OS Command injection in Bolt
Cross-Site Request Forgery in ForkCMS
SQL Injection in librenms
Server-side request forgery in Ghost CMS
Code injection in blamer
Command injection in bestzip
Arbitrary Code Execution in grunt
Prototype Pollution in safe-object2
Prototype Pollution in worksmith
Prototype Pollution in nodee-utils
Prototype Pollution in gammautils
Prototype Pollution in promisehelpers
Code injection in mock2easy
Prototype Pollution in deep-get-set
Prototype Pollution in gedi
Prototype Pollution in node-oojs
Prototype Pollution in locutus
Prototype Pollution in confucious
Prototype Pollution in dot-notes
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.