Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Drupal core - SA-CORE-2019-003
drupal/fontawesome - SA-CONTRIB-2019-025
drupal/tmgmt - SA-CONTRIB-2019-024
drupal/paragraphs - SA-CONTRIB-2019-023
drupal/video - SA-CONTRIB-2019-022
drupal/metatag - SA-CONTRIB-2019-021
drupal/jsonapi - SA-CONTRIB-2019-019
Path Traversal in total.js
SQLAlchemy vulnerable to SQL Injection via order_by parameter
WooCommerce <= 3.5.4 - Stored Cross-Site Scripting
WordPress Core <= 5.0.3 - Path Traversal and Local File Inclusion
WordPress Core < 5.0.1 - Remote Code Execution
DoS due to excessively large websocket message in ws
Potential Command Injection in shell-quote
SSL Validation Defaults to False in electron-packager
Sanitization bypass using HTML Entities in marked
Insecure Default Configuration in airbrake
chromedriver Downloads Resources over HTTP
closure-util downloads Resources over HTTP
m-server Vulnerable to Directory Traversal
Downloads Resources over HTTP in broccoli-closure
dwebp-bin downloads Resources over HTTP
Downloads Resources over HTTP in jvminstall
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.