Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,458
Reset filtersmde ejs vulnerable to XSS
Cross-Site Request Forgery (CSRF) in keystone
Potential Command Injection in printer
Potential Command Injection in codem-transcode
Cross-Site Scripting in keystone
Keystone is vulnerable to CSV injection
keycloak-connect and keycloak-js improperly handle invalid tokens
Cross-Site Scripting in keystone
Cross-site Scripting in jquery-ui
jquery-ui Tooltip widget vulnerable to XSS
Deserialization Code Execution in js-yaml
Regular Expression Denial of Service in semver
Regular Expression Denial of Service in ms
Incorrect Handling of Non-Boolean Comparisons During Minification in uglify-js
Regular Expression Denial of Service in marked
Cross-Site Scripting in mustache
Symlink Arbitrary File Overwrite in tar
Root Path Disclosure in send
Regular Expression Denial of Service in uglify-js
Cross-Site Scripting in serve-index
Directory Traversal in geddy
VBScript Content Injection in marked
SQL Injection in sequelize
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.