Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Missing Authorization in User#setDisabledStatus in org.xwiki.platform:xwiki-platform-oldcore
Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in AttachmentSelector.xml
Cross-Site Request Forgery (CSRF) allowing to delete or rename tags
Prevent RCE when deserializing untrusted user input
Fastify: Incorrect Content-Type parsing can lead to CSRF attack
Invalid char to bool conversion when printing a tensor
Heap overflow in `QuantizeAndDequantizeV2`
Segfault in `CompositeTensorVariantToComponents`
`CHECK` fail via inputs in `PyFunc`
Overflow in `ResizeNearestNeighborGrad`
Out of bounds write in grappler in Tensorflow
`CHECK_EQ` fail via input in `SparseMatrixNNZ`
FractionalMaxPool and FractionalAVGPool heap out-of-bounds acess
`CHECK` fail via inputs in `SdcaOptimizer`
`CHECK` fail via inputs in `SparseFillEmptyRowsGrad`
`FractionalMaxPoolGrad` Heap out of bounds read
`tf.raw_ops.Mfcc` crashes
Cross-site Scripting in Backdrop CMS
`MirrorPadGrad` heap out of bounds read
Buffer overflow in `CONV_3D_TRANSPOSE` on TFLite
`CHECK_EQ` fail in `tf.raw_ops.TensorListResize`
Segfault in `tf.raw_ops.TensorListConcat`
`CHECK` fail in `BCast` overflow
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.