Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,120
Reset filtersSQL injection in SiteServer CMS
ChakraCore information disclosure vulnerability
NuGet Package Manager Tampering Vulnerability
Elevation of privilege in ASP.NET Core
Cross site scripting attack in ServiceStack Framework
Chakra Scripting Engine RCE Vulnerability
ChakraCore RCE via Out-of-bounds write
Chakra Scripting Engine RCE via Out-of-bounds write
Chakra Scripting Engine RCE via Out-of-bounds write
Chakra Scripting Engine and ChakraCore Vulnerable to Memory Corruption
MongoDB C# Driver Risk of Exposing Authentication Data via Command Listener
.NET Core Remote Code Execution Vulnerability
Denial of service in .NET core
ASP.NET Core and Visual Studio Denial of Service Vulnerability
Umbraco CMS vulnerable to stored XSS
QuantConnect Lean vulnerable to insecure deserialization
A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happe
Cookie parsing failure
ASP.NET Core Denial of Service Vulnerability
.NET Framework, SharePoint Server, and Visual Studio Remote Code Execution Vulnerability
GleamTech FileUltimate Cross-site Scripting
ChakraCore RCE Vulnerability
ASP.NET Core Denial of Service Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.