Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,364
Reset filterskiwi TCMS has possibility for user to update email address to unverified one
TensorFlow has Null Pointer Error in TensorArrayConcatV2
TensorFlow vulnerable to seg fault in `tf.raw_ops.Print`
TensorFlow has Null Pointer Error in SparseSparseMaximum
pgAdmin 4 vulnerable to directory traversal
Kiwi TCMS Stored Cross-site Scripting via SVG file
Apache Airflow Spark Provider vulnerable to improper input validation
TensorFlow has Floating Point Exception in AvgPoolGrad with XLA
tripleo-ansible may disclose important configuration details from an OpenStack deployment
tripleo-ansible may disclose important configuration details from an OpenStack deployment
Saleor has Staff-Authenticated Error Message Information Disclosure Vulnerability via Python Exceptions
Saleor Unauthenticated Information Disclosure Vulnerability via Python Exceptions
Sentry SDK leaks sensitive session information when `sendDefaultPII` is set to `True`
openstack-neutron uncontrolled resource consumption flaw
Vulnerable OpenSSL included in cryptography wheels
Denial of service vulnerability on Password reset page
Apache Airflow AWS Provider Generates Error Message Containing Sensitive Information
Path traversal in spotipy
No protection against brute-force attacks on login page
Apache Airflow Google Provider Improper Input Validation vulnerability
Pyload Insufficient Session Expiration vulnerability
Pyload contains Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
OpenStack Kolla sudo privilege escalation vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.