Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,364
Reset filtersRemote code execution in Apache Airflow Docker's Provider
Incorrect handling of invalid surrogate pair characters
OpenZeppelin Contracts for Cairo account cannot process transactions on Goerli
OctoPrint does not have rate limiting on the login page
OpenStack Nova Changing vnic_type breaks compute service restart
Unrestricted Attachment Upload
Matrix Sydent mishandles emails
OpenStack Keystone allows information disclosure during account locking
wolfCrypt leaks cryptographic information via timing side channel
PyDio Stored XSS Vulnerability
OpenStack Nova can leak consoleauth token into log files
Fabric vulnerable to symlink attack on tmp files
Cobbler is vulnerable to code injection
SOAPpy vulnerable to XML External Entity attacks
OpenStack Compute (Nova) does not verify the virtual size of a QCOW2 image
OpenStack Identity Keystone Privilege Escalation vulnerability
SOAPpy vulnerable to XXE attacks
OpenStack Nova Router metadata queries are not restricted by tenant
OpenStack Cinder Exposure of Sensitive Information to an Unauthorized Actor vulnerability
OpenStack Compute (Nova) allows remote authenticated users to gain privileges via API requests
Netflix Security Monkey Open Redirect vulnerability
OpenStack Compute (Nova) Denial of service due to improper validation of virtual size of QCOW2 image
OpenStack Object Storage (Swift) Sensitive Data Exposure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.