Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,474
Reset filterslibsbmlsim downloads Resources over HTTP
Downloads Resources over HTTP in rs-brightcove
Downloads Resources over HTTP in google-closure-tools-latest
Downloads Resources over HTTP in serc.js
Downloads Resources over HTTP in arcanist
Downloads Resources over HTTP in healthcenter
Downloads Resources over HTTP in pk-app-wonderbox
Downloads Resources over HTTP in windows-iedriver
openframe-ascii-image downloads Resources over HTTP
Downloads Resources over HTTP in selenium-download
appium-chromedriver downloads Resources over HTTP
Resources Downloaded over Insecure Protocol in igniteui
Sails before 0.12.7 vulnerable to Broken CORS
Route Validation Bypass in call
Arbitrary File Write in cli
Cross-Site Scripting in backbone
Insecure Defaults Allow MITM Over TLS in engine.io-client
Timing Attack in csrf-lite
Authentication Bypass in console-io
No CSRF Validation in droppy
Directory Traversal in restafary
Regular Expression Denial of Service in riot-compiler
grunt-gh-pages before 0.10.0 may allow unencrypted GitHub credentials to be written to a log file
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.