Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,855
Reset filtersClassic Buffer Overflow in pyo
Cross Site Request Forgery in mailman
APM Java Agent Local Privilege Escalation
calibre-web is vulnerable to Cross-Site Request Forgery (CSRF)
calibre-web is vulnerable to Cross-site Scripting
Information disclosure vulnerability in OnionShare
Temporary urls leaked via logging
Missing Authentication for Critical Function in Saleor
Cross-site scripting in Contentful
Moderate severity vulnerability that affects mailman
Memory leak in Nanopb
Moderate severity vulnerability that affects Zope2
MLflow: trace API endpoints lack proper authorization validators
Malicious code in uprobe (PyPI)
Wagtail: Pages translations can be created without page permissions when using simple_translation
Wagtail: Denial of service via unbounded filter specs in the image preview
Wagtail: Improper permission handling in image preview
Wagtail: Improper restriction handling on Documents and Images chosen endpoints
Wagtail: Reflected XSS in dynamic image URL generator view
Malicious code in ufish (PyPI)
Gradio before 6.16.0 contain a path traversal vulnerability in the FileExplorer component's preprocess() method that allows unauthenticated attackers to escape the configured root directory by supplyi
Malicious code in synago (PyPI)
Malicious code in pantheon-toolsets (PyPI)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.