Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Null pointer dereference in `RaggedTensorToTensor`
Null pointer dereference in `CompressElement`
Division by 0 in inplace operations
Division by 0 in `ResourceGather`
Division by 0 in `ResourceScatterDiv`
Integer division by 0 in sparse reshaping
Floating point exception in `SparseDenseCwiseDiv`
Drupal core - SA-CORE-2021-005
Open Redirect in Next.js
Improper Access Control in Dolibarr
Securimage-WP-Fixed <= 3.5.4 - Reflected Cross-Site Scripting
PDF.js Viewer <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Per Page Add to Head <= 1.4.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Per Page Add To Head <= 1.4.3 Cross-Site Request Forgery to Stored Cross-Site Scripting
Software License Manager <= 4.4.7 - Reflected Cross-Site Scripting
Cross-site Scripting in video.js
Prototype Pollution in deepmergefn
Cross-site Scripting in curly-bracket-parser
Open redirect in url-parse
jszip Vulnerable to Prototype Pollution
Regular Expression Denial of Service in path-parse
miniOrange's Google Authenticator <= 5.4.39 - Cross-Site Scripting
Picture Gallery – Frontend Image Uploads, AJAX Photo List < 1.4.3 - Cross-Site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.