Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filtersAntSword RCE and XSS via code injection
mxGraph vulnerable to cross-site scripting in color field
Uncontrolled Resource Consumption in Hawk
Improper handling of multiline messages in node-irc affects matrix-appservice-irc
Crash in HeaderParser in dicer
Improper Removal of Sensitive Information Before Storage or Transfer in Strapi
Improper Removal of Sensitive Information Before Storage or Transfer in Strapi
Potential Cross-site Scripting vulnerability in Hydrogen
jplayer Cross Site Scripting vulnerability
Cloudera HUE Account Enumeration
EpicEditor XSS Vulnerability
OpenPGP 1.2.0 and earlier decrypts arbitrary messages
Electron vulnerable to remote command execution
QooxDoo XSS in Callback Parameter
Cross-site scripting in yui 2.4.0
NodeBB Cross-site Scripting Vulnerability in Markdown Processing
Connect-Multiparty allows arbitrary file upload
Cross-site Scripting in bootstrap-table
Shiba vulnerable to XSS leading to code execution
dijit editor cross-site scripting vulnerability
mxGraph vulnerable to XXE attacks
Converse.js Exposure of Sensitive Information
oauth2orize-fprm XSS vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.