Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Regular Expression Denial of Service in Handlebars
Arbitrary Code Execution in Handlebars
Denial of service in Apache OpenMeetings
Improper file downloads in Apache Tapestry
Cross-site scripting in @atlaskit/editor-core
Prototype Pollution in safetydance
Request logging bypass in Jenkins Audit Trail Plugin
Path Traversal in Eclipse Vert
Authentication bypass in Apache Hadoop
Authentication bypass in Apache Kylin
Improper Handling of Exceptional Conditions and Improper Input Validation in Reactor Netty
Insufficiently Protected Credentials in Reactor Netty
Data Amplification in Play Framework
Out-of-bounds Write in Play Framework
Uncontrolled Recursion in Play Framework
Improper Validation of Specified Quantity in Input in Eclipse Hono
Prototype pollution in pathval
OS Command Injection and Command Injection in kill-port-process
Cross-site Scripting in markdown-it-highlightjs
Code Injection in jsen
Social Media Feather <= 2.0.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Spiffy Calendar <= 4.9.0 - Edit/Delete event via IDOR
Comments - wpDiscuz <= 7.3.11 Sensitive Information Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.