Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,856
Reset filtersTensorFlow vulnerable to `CHECK` fail in `QuantizeAndDequantizeV3`
TensorFlow vulnerable to `CHECK` fail in `RaggedTensorToVariant`
TensorFlow vulnerable to `CHECK` fail in `FakeQuantWithMinMaxVarsPerChannel`
TensorFlow segfault TFLite converter on per-channel quantized transposed convolutions
TensorFlow vulnerable to OOB write in `scatter_nd` in TF Lite
TensorFlow vulnerable to OOB read in `Gather_nd` in TF Lite
TensorFlow vulnerable to `CHECK` failure in tf.reshape via overflows
TensorFlow vulnerable to `CHECK` failure in `SobolSample` via missing validation
indy-node is the server portion of Hyperledger Indy, a distributed ledger purpose-built for decentralized identity. In vulnerable versions of indy-node, an attacker can max out the number of client co
TensorFlow vulnerable to `CHECK` fail in `tf.sparse.cross`
TensorFlow vulnerable to `CHECK` fail in `Conv2DBackpropInput`
rdiffweb CSRF vulnerability in profile's SSH keys can lead to unauthorized access
Python-TUF vulnerable to incorrect threshold signature computation for new root metadata
VNCAuthProxy authentication bypass vulnerability
LIEF commit 365a16a was discovered to contain a segmentation violation via the component CoreFile.tcc:69.
LIEF commit 5d1d643 was discovered to contain a segmentation violation via the function LIEF::MachO::SegmentCommand::file_offset() at /MachO/SegmentCommand.cpp.
LIEF commit 365a16a was discovered to contain a heap-buffer overflow via the function print_binary at /c/macho_reader.c.
LIEF commit 5d1d643 was discovered to contain a heap-buffer overflow in the component /core/CorePrPsInfo.tcc.
LIEF commit 365a16a was discovered to contain a reachable assertion abort via the component BinaryStream.hpp.
rdiffweb contains Weak Password Requirements
rdiffweb Missing Custom Error Page
rdiffweb vulnerable to Sensitive Cookie in HTTPS Session Without 'Secure' Attribute
OAuthLib vulnerable to DoS when attacker provides malicious IPV6 URI
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.