Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,476
Reset filtersAuto-merging Person Records Compromised
Open Redirect in trailing-slash
ReDoS in Sec-Websocket-Protocol header
Cross-site Scripting in docsify
Credential leak in react-native-fast-image
Path traversal in rollup-plugin-serve
Cross-site scripting in TileServer GL
Path Traversal in droppy
Path Traversal in browserless-chrome
Injection and Cross-site Scripting in osm-static-maps
Cross-site Scripting in lightning-server
Server-Side Request Forgery in node-pdf-generator
Server-Side Request Forgery in phantomjs-seo
Path traversal in servey
Server-side request forgery in Ghost CMS
Code injection in mock2easy
cumulative-distribution-function Infinite Loop vulnerability
Code Injection in oauth2-server
Any logged in user could edit any other logged in user.
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) in @nextcloud/dialogs
Server-Side Request Forgery and Inclusion of Functionality from Untrusted Control Sphere in jsreport
Server-Side Request Forgery in private-ip
mongodb-client-encryption vulnerable to Improper Certificate Validation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.