Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,523
Reset filtersImproper Input Validation in Deap
Auth0 angular-jwt misinterprets allowlist as regex
Angular Redactor XSS Vulnerability
Open Chinese Convert subject to Denial of Service via Out-of-bounds Read
pdf.js < 2.0.943 - Authenticated (Author+) Stored Cross-Site Scripting
Improper Neutralization of Input During Web Page Generation in Select2
jQuery vulnerable to Cross-Site Scripting (XSS)
Prototype Pollution in convict
Command injection in workspace-tools
Prototype Pollution in sds
Incorrect Permission Assignment for Critical Resource in NPM
Etherpad Lite Access Restriction Bypass
express-cart allows any user to create an admin user
Electron vulnerable to URL spoofing via PDFium
fs-git command injection vulnerability
PIDUsage Enables OS Command Injection
express-cart unrestricted file upload vulnerability
statics-server Cross-site Scripting vulnerability
Nuclide Improper Input Validation
Simditor XSS Vulnerability
Cisco node-jose improper validation of JWT signature
YUI Cross-site Scripting (XSS) vulnerability
YUI Cross-site Scripting (XSS) vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.