Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,855
Reset filtersUntrusted search path under some conditions on Windows allows arbitrary code execution
In Appwrite CLI before 3.0.0, when using the login command, the credentials of the Appwrite user are stored in a ~/.appwrite/prefs.json file with 0644 as UNIX permissions. Any user of the local system
PyCryptodome and pycryptodomex side-channel leakage for OAEP decryption
gratient 0.5 contains credential harvesting code
PaddlePaddle floating point exception in paddle.argmin and paddle.argmax
PaddlePaddle command injection in convert_shape_compare
PaddlePaddle nullptr dereference in paddle.crop
PaddlePaddle command injection in _wget_download
PaddlePaddle command injection in get_online_pass_interval
PaddlePaddle heap buffer overflow in paddle.repeat_interleave
PaddlePaddle floating point exception in paddle.amin
PaddlePaddle stack overflow in paddle.searchsorted
PaddlePaddle null pointer dereference in paddle.nextafter
PaddlePaddle floating point exception in paddle.nanmedian
PaddlePaddle segfault in paddle.put_along_axis
PaddlePaddle segfault in paddle.dot
PaddlePaddle stack overflow in paddle.linalg.lu_unpack
PaddlePaddle floating point exception in paddle.lerp
PaddlePaddle segfault in paddle.mode
PaddlePaddle floating point exception in paddle.linalg.eig
PaddlePaddle floating point exception in paddle.topk
PaddlePaddle floating point exception in paddle.linalg.matrix_rank
Hail relies on OIDC email claims to verify the validity of a user's domain.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.