Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
WP Songbook <= 2.0.11 - Reflected Cross-Site Scripting
2Way VideoCalls and Random Chat – HTML5 Webcam Videochat <= 5.2.7 - Reflected Cross-Site Scripting
WP SEO Tags <= 2.2.7 - Reflected Cross-Site Scripting
Simple Popup Newsletter <= 1.4.7 - Reflected Cross-Site Scripting
Segfault on strings tensors with mistmatched dimensions, due to Go code
FPE in LSH in TFLite
Heap OOB in TFLite's `Gather*` implementations
Heap OOB in TFLite
FPE in TFLite pooling operations
FPE in TFLite division operations
Use of unitialized value in TFLite
Heap OOB in nested `tf.map_fn` with `RaggedTensor`s
Arbitrary code execution due to YAML deserialization
Missing validation in shape inference for `Dequantize`
Incomplete validation in `MaxPoolGrad`
`CHECK`-fail in `MapStage`
Heap OOB in `SdcaOptimizerV2`
Heap OOB in `UpperBound` and `LowerBound`
Crash in NMS ops caused by integer conversion to unsigned
FPE in `tf.raw_ops.UnravelIndex`
Incomplete validation in MKL requantization
Incomplete validation in `QuantizeV2`
Null pointer dereference in TFLite MLIR optimizations
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.