Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,337
Reset filtersHard coded credentials in FreeTAKServer
Authentication Bypass by Capture-replay in Apache Spark
Exposure of Sensitive Information to an Unauthorized Actor in httpie
Twisted SSH client and server deny of service during SSH handshake.
Incorrect Authorization and Exposure of Sensitive Information to an Unauthorized Actor in scrapy
Scrapy cookie-setting is not restricted based on the public suffix list
Cross-site Scripting in Weblate
OS Command injection in Apache Airflow
Apache Airflow Cross-site Scripting Vulnerability
B2 Command Line Tool is the official command line tool for the backblaze cloud storage service. Linux and Mac releases of the B2 command-line tool version 3.2.0 and below contain a key disclosure vuln
b2-sdk-python TOCTOU application key disclosure
Insecure Temporary File in mlflow
Incorrect Default Permissions in Cobbler
`CHECK`-failures in binary ops in Tensorflow
`CHECK`-failures in `TensorByteSize` in Tensorflow
`CHECK`-failures during Grappler's `SafeToRemoveIdentity` in Tensorflow
Division by zero in Tensorflow
Out of bounds write in TFLite
Read and Write outside of bounds in TensorFlow
Integer overflow in TFLite
Integer overflow in TFLite array creation
`CHECK`-failures in Tensorflow
Division by zero in TFLite
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.