Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Prototype Pollution in querystringify
Regular Expression Denial of Service
Rate Limiting Bypass in express-brute
Cross-site Scripting in HAPI FHIR
Aubio is vulnerable to a NULL pointer dereference in new_aubio_notes function
Aubio is vulnerable to a NULL pointer dereference in new_aubio_filterbank
aubio Buffer Overflow vulnerability
ConvertPlus <= 3.4.4 - Unauthorized Account Creation
Code Injection in PyXDG
express-basic-auth Timing Attack due to native string comparison instead of constant time string comparison
Prototype Pollution in upmerge
Insecure Default Configuration in redbird
Regular Expression Denial of Service in remarkable
Signature Verification Bypass in jwt-simple
Path Traversal in servey
SQL Injection in typeorm
Cross-site Scriptin in JSPWiki
Cross-site Scripting in JSPWiki
Cross-Site Scripting in JSPWiki
Crelly Slider <= 1.3.4 - Arbitrary File Upload
Command Injection in dot
Regular Expression Denial of Service in clean-css
Insecure Default Configuration in tesseract.js
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.