Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,836
Reset filtersCode injection via unsafe YAML loading
Potential bypass of an upstream access control based on URL paths in Django
Code injection in FreeIPA
Permissions not properly checked in Invenio-Drafts-Resources
Cross-site Scripting in CKAN
django-helpdesk is vulnerable to Cross-site Scripting
S3Scanner allows Directory Traversal
Improper Neutralization of Formula Elements in a CSV File in html-2-csv
Improper certificate management in AWS IoT Device SDK v2
Improper certificate management in AWS IoT Device SDK v2
Improper certificate management in AWS IoT Device SDK v2
Improper certificate management in AWS IoT Device SDK v2
Arbitrary file reading vulnerability in Aim
Path traversal in Matrix Synapse
Cross-site Scripting in django-wiki
Remote unauthenticated attackers able to upload files in Onionshare
Cross-site Scripting in django-helpdesk
Cross-site Scripting in django-helpdesk
Antilles Dependency Confusion Vulnerability
Improper Input Validation in pip
Improper Verification of Cryptographic Signature in starkbank-ecdsa
Signature verification vulnerability in Stark Bank ecdsa libraries
Stored XSS in Jupyter nbdime
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.