Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,787
Reset filtersDjango Incorrect HTTP detection with reverse-proxy connecting via HTTPS
http.c in Exiv2 through 0.27.1 allows a malicious http server to cause a denial of service (crash due to a NULL pointer dereference) by returning a crafted response that lacks a space character.
Improper Certificate Validation in Twisted
Twisted CRLF Injection
Aubio is vulnerable to a NULL pointer dereference in new_aubio_notes function
Aubio is vulnerable to a NULL pointer dereference in new_aubio_filterbank
aubio Buffer Overflow vulnerability
Code Injection in PyXDG
Django Cross-site Scripting in AdminURLFieldWidget
Improper Authentication in Buildbot
Capstone SEGV caused by a read memory access
Google TensorFlow 1.7.x and earlier is affected by a Buffer Overflow vulnerability. The type of exploitation is context-dependent.
NULL pointer dereference in Google TensorFlow before 1.12.2 could cause a denial of service via an invalid GIF file.
Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow before 1.7.1, could result in a crash or read from other parts of process memory.
Invalid memory access and/or a heap buffer overflow in the TensorFlow XLA compiler in Google TensorFlow before 1.7.1 could cause a crash or read from other parts of process memory via a crafted config
Google TensorFlow 1.7 and below is affected by: Buffer Overflow. The impact is: execute arbitrary code (local).
Google TensorFlow 1.6.x and earlier is affected by: Null Pointer Dereference. The type of exploitation is: context-dependent.
Improper Input Validation in python-dbusmock
Improper Certificate Validation in urllib3
XSS in jQuery as used in Drupal, Backdrop CMS, and other products
Python-saml allows manipulation of SAML data without invalidation of cryptographic signature
Improper Neutralization of CRLF Sequences in urllib3 library for Python
Apache Airflow vulnerable to CSRF Attacks
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.