Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,817
Reset filtersDivision by 0 in `Conv2DBackpropInput`
Division by 0 in `Conv2DBackpropFilter`
CHECK-fail in AddManySparseToTensorsMap
Division by 0 in `Conv3DBackprop*`
Segfault in SparseCountSparseOutput
Heap buffer overflow in `Conv3DBackprop*`
CHECK-fail in SparseCross due to type confusion
Session operations in eager mode lead to null pointer dereferences
Division by zero in `Conv3D`
Null pointer dereference via invalid Ragged Tensors
Reference binding to null pointer in `MatrixDiag*` ops
Heap out of bounds write in `RaggedBinCount`
Type confusion during tensor casts lead to dereferencing null pointers
Division by 0 in `DenseCountSparseOutput`
Heap buffer overflow in `RaggedBinCount`
Use of "infinity" as an input to datetime and date fields causes infinite loop in pydantic
Denial of service attack via push rule patterns in matrix-synapse
**Resolved** Only when using H2/MySQL/TiDB as Apache SkyWalking storage, there is a SQL injection vulnerability in the wildcard query cases.
Improper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventlet
Cross-site scripting in LocalStack
Command injection in LocalStack
Header injection possible in Django
Unauthorized access through URL manipulation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.