Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,120
Reset filtersChakraCore RCE Vulnerability
Bootstrap vulnerable to Cross-Site Scripting (XSS)
.NET Core Denial of Service Vulnerability
protobuf allows remote authenticated attackers to cause a heap-based buffer overflow.
Code Injection in Masuit.Tools.Core
Mono ASP.NET View State Cross-Site Scripting (XSS) vulnerability
CuteSoft CuteEditor Path Traversal vulnerability
DotNetNuke Vulnerable to XSS in Pass-Through Values
Apache log4net format string vulnerability causes DoS
Exposure of Sensitive Information to an Unauthorized Actor in DisCatSharp
YARP Denial of Service Vulnerability
PowerShell Elevation of Privilege Vulnerability
Azure SDK for .NET Information Disclosure Vulnerability.
Improper Certificate Validation
Infinite loop in .Net Bond
Path Traversal: 'dir/../../filename' in moment.locale
Server side request forgery in C1 CMS
Deserialization of Untrusted Data in SinGooCMS.Utility
Code injection in RazorEngine
Prototype Pollution in jquery.cookie
Use after free in Animation
Path Traversal in SharpZipLib
Path Traversal in SharpZipLib
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.