Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
OS Command Injection in serial-number
OS Command Injection in giting
Exposure of Resource to Wrong Sphere in valib
Code injection in port-killer
Prototype Pollution in decal
Prototype Pollution in decal
Command injection in launchpad
Prototype Pollution in iniparserjs
Cross-site Scripting in vis-timeline
Regular Expression Denial of Service (ReDoS) in es6-crawler-detect
Command injection in eslint-fixer
Improper Neutralization of Input in Theia console
Server-Side Request Forgery in private-ip
Cross-site Scripting (XSS) in Eclipse Theia
Insufficient Verification of Data Authenticity in Eclipse Theia
OS Command Injection in lsof
Improper Input Validation in network-manager
OS Command Injection in im-metadata
OS Command Injection in im-resize
Command Injection in killport
Improper neutralization of arguments in freediskspace
Denial of Service in get-ip-range
Command injection in gitlog
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.