Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,336
Reset filtersAdding a private/unlisted room to a community exposes room metadata in an unauthorised manner.
Improper Authorization and Origin Validation Error in OneFuzz
Heap OOB in TFLite
Integer division by 0 in sparse reshaping
Memory access due to code generation flaw in Cranelift module
Integer overflow in TFLite memory allocation
Heap OOB write in TFLite
Null pointer dereference in TFLite's `Reshape` operator
Heap buffer overflow in `MaxPoolGrad`
Heap buffer overflow in `StringNGrams`
Division by zero in `Conv2DBackpropFilter`
Division by 0 in `Conv2DBackpropInput`
Division by 0 in `Conv3DBackprop*`
CHECK-fail in SparseCross due to type confusion
Type confusion during tensor casts lead to dereferencing null pointers
Unauthorized access through URL manipulation
Improper Input Validation in sopel-plugins.channelmgnt
Cross-site scripting in Bleach
Django Directory Traversal via archive.extract
RSA weakness in tslite-ng
Base class whitelist configuration ignored in OAuthenticator
malicious SVG attachment causing stored XSS vulnerability
Buffer overflow in deprecated USB HALs and stack overflow in USB enumeration
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.