Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
PyPDF2 vulnerable to possible Infinite Loop when reading malformed objects
kiwitcms vulnerable to stored cross-site scripting via unrestricted file upload
Apache Airflow ODBC Provider Argument Injection vulnerability
Apache Airflow JDBC Provider Improper Input Validation vulnerability
Any file can be included with the pymdown-snippets extension
Flask-AppBuilder Has No Rate Limiting on Login AUTH DB
Improper Restriction of Excessive Authentication Attempts in calibreweb
Allegro Tech BigFlow vulnerable to Missing SSL Certificate Validation
Weak Password Requirements in calibreweb
Unrestricted file upload in kiwi TCMS
kiwi TCMS has possibility for user to update email address to unverified one
git-url-parse Regular Expression Denial of Service
TensorFlow has Null Pointer Error in TensorArrayConcatV2
TensorFlow vulnerable to seg fault in `tf.raw_ops.Print`
TensorFlow vulnerable to integer overflow in EditDistance
TensorFlow has Null Pointer Error in SparseSparseMaximum
TensorFlow has Heap-buffer-overflow in AvgPoolGrad
pgAdmin 4 vulnerable to directory traversal
configobj ReDoS exploitable by developer using values in a server-side configuration file
Kiwi TCMS Stored Cross-site Scripting via SVG file
Apache Airflow Spark Provider vulnerable to improper input validation
TensorFlow has Null Pointer Error in QuantizedMatMulWithBiasAndDequantize
TensorFlow has Floating Point Exception in AvgPoolGrad with XLA
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.