Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 214
Reset filtersOrchardCore vulnerable to HTML injection
jQuery UI vulnerable to XSS when refreshing a checkboxradio with an HTML-like initial text label
Moment.js vulnerable to Inefficient Regular Expression Complexity
Improper Handling of Exceptional Conditions in Newtonsoft.Json
MongoDB C# Driver Risk of Exposing Authentication Data via Command Listener
ChakraCore RCE Vulnerability
Bootstrap vulnerable to Cross-Site Scripting (XSS)
Code injection in RazorEngine
Path Traversal in SharpZipLib
Path Traversal in SharpZipLib
Path Traversal in SharpZipLib
Cross-site Scripting OrchardCore.Application.Cms.Targets
AjaxNetProfessional deserializes arbitrary JavaScript objects
Server side request forgery in SwaggerUI
Improper Verification of Cryptographic Signature in starkbank-ecdsa
Signature verification vulnerability in Stark Bank ecdsa libraries
Low severity vulnerability that affects Gw2Sharp
bootstrap Cross-site Scripting vulnerability
Bootstrap Cross-site Scripting vulnerability
Bootstrap Cross-site Scripting vulnerability
Bootstrap Cross-site Scripting vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.