Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,825
Reset filtersDjango Denial-of-service in django.utils.text.Truncator
Exposure of Sensitive Information to an Unauthorized Actor in ansible
Improper Access Control in novajoin
Invenio-App vulnerable to host header injection attack
Cross-site Scripting in invenio-communities
Cross-site scripting invenio-records
Cross-site Scripting in invenio-previewer
Infinite Loop in scapy
Improper Restriction of XML External Entity Reference in ladon
Pallets Project Flask is vulnerable to Denial of Service via Unexpected memory usage
python-engineio vulnerable to Cross-Site Request Forgery (CSRF)
XML Injection in python-libnmap
Injection vulnerability that affects ironic-discoverd
Improper Verification of Cryptographic Signature in django-rest-registration
Django Incorrect HTTP detection with reverse-proxy connecting via HTTPS
http.c in Exiv2 through 0.27.1 allows a malicious http server to cause a denial of service (crash due to a NULL pointer dereference) by returning a crafted response that lacks a space character.
Improper Certificate Validation in Twisted
Twisted CRLF Injection
Aubio is vulnerable to a NULL pointer dereference in new_aubio_notes function
Aubio is vulnerable to a NULL pointer dereference in new_aubio_filterbank
aubio Buffer Overflow vulnerability
Code Injection in PyXDG
Django Cross-site Scripting in AdminURLFieldWidget
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.