Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,817
Reset filtersImproper Restriction of XML External Entity Reference in ladon
Pallets Project Flask is vulnerable to Denial of Service via Unexpected memory usage
python-engineio vulnerable to Cross-Site Request Forgery (CSRF)
XML Injection in python-libnmap
Injection vulnerability that affects ironic-discoverd
Improper Verification of Cryptographic Signature in django-rest-registration
Django Incorrect HTTP detection with reverse-proxy connecting via HTTPS
http.c in Exiv2 through 0.27.1 allows a malicious http server to cause a denial of service (crash due to a NULL pointer dereference) by returning a crafted response that lacks a space character.
Improper Certificate Validation in Twisted
Twisted CRLF Injection
Aubio is vulnerable to a NULL pointer dereference in new_aubio_notes function
Aubio is vulnerable to a NULL pointer dereference in new_aubio_filterbank
aubio Buffer Overflow vulnerability
Code Injection in PyXDG
Django Cross-site Scripting in AdminURLFieldWidget
Improper Authentication in Buildbot
Capstone SEGV caused by a read memory access
Google TensorFlow 1.7.x and earlier is affected by a Buffer Overflow vulnerability. The type of exploitation is context-dependent.
NULL pointer dereference in Google TensorFlow before 1.12.2 could cause a denial of service via an invalid GIF file.
Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow before 1.7.1, could result in a crash or read from other parts of process memory.
Invalid memory access and/or a heap buffer overflow in the TensorFlow XLA compiler in Google TensorFlow before 1.7.1 could cause a crash or read from other parts of process memory via a crafted config
Google TensorFlow 1.7 and below is affected by: Buffer Overflow. The impact is: execute arbitrary code (local).
Google TensorFlow 1.6.x and earlier is affected by: Null Pointer Dereference. The type of exploitation is: context-dependent.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.