Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,481
Reset filtersAutoUpdater module fails to validate certain nested components of the bundle
NocoDB information disclosure vulnerability
Server-Side Request Forgery in kityminder
Unsanitized JavaScript code injection possible in gatsby-plugin-mdx
Command injection in google-it
Server-Side Template Injection in formio
Missing Cryptographic Step in cassproject
Broken Authentication in Atlassian Connect Express
Xen Orchestra Mishandles Authorization
HashBrown CMS RCE
HashBrown CMS Directory Traversal
Cezerin Unauthorized Acces
Total.js CMS RCE Vulnerability
Total.js CMS Path Traversal
Crash in HeaderParser in dicer
mxGraph vulnerable to XXE attacks
statics-server Cross-site Scripting vulnerability
Cross site scripting in code-server
Improper handling of multiline messages in node-irc
Authentication bypass and denial of service (DoS) vulnerabilities in Apple Game Center auth adapter
RCE in SiteServer CMS
ejs template injection vulnerability
Prototype Pollution in convict
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.