Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,609
Heap OOB in `RaggedGather`
Heap out of bounds access in sparse reduction operations
Clipboard-based DOM-XSS
Null pointer dereference in `UncompressElement`
Null pointer dereference in `SparseTensorSliceDataset`
Null pointer dereference in `MatrixDiagPartOp`
Null pointer dereference and heap OOB read in operations restoring tensors
Null pointer dereference in `RaggedTensorToTensor`
Null pointer dereference in `CompressElement`
Division by 0 in inplace operations
Division by 0 in `ResourceGather`
Division by 0 in `ResourceScatterDiv`
Integer division by 0 in sparse reshaping
Floating point exception in `SparseDenseCwiseDiv`
Drupal core - SA-CORE-2021-005
Open Redirect in Next.js
Improper Access Control in Dolibarr
Securimage-WP-Fixed <= 3.5.4 - Reflected Cross-Site Scripting
PDF.js Viewer <= 2.0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Per Page Add to Head <= 1.4.4 - Authenticated (Admin+) Stored Cross-Site Scripting
Per Page Add To Head <= 1.4.3 Cross-Site Request Forgery to Stored Cross-Site Scripting
Software License Manager <= 4.4.7 - Reflected Cross-Site Scripting
Cross-site Scripting in video.js
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.