Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 15
Reset filtersNodeBB Cross-site scripting (XSS) vulnerability
Incorrect Access Control in NodeBB
Unintentional leakage of private information via cross-origin websocket session hijacking
Path traversal and code execution via prototype vulnerability
NodeBB vulnerable to account takeover via prototype vulnerability
NodeBB vulnerable to Cross-Site Request Forgery
NodeBB account takeover via SSO plugins
Cryptographically weak PRNG in `utils.generateUUID`
NodeBB Cross-site Scripting Vulnerability in Markdown Processing
API token verification can be bypassed in NodeBB
XSS via prototype pollution in NodeBB
NodeBB vulnerable to path traversal in translator module
XSS due to lack of CSRF validation for replying/publishing
Cross-site Scripting in NodeBB
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.