Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
tripleo-ansible may disclose important configuration details from an OpenStack deployment
Saleor has Staff-Authenticated Error Message Information Disclosure Vulnerability via Python Exceptions
Saleor Unauthenticated Information Disclosure Vulnerability via Python Exceptions
Cross-site Scripting in django-ajax-utilities
Open redirect in web2py
Sentry SDK leaks sensitive session information when `sendDefaultPII` is set to `True`
openstack-neutron uncontrolled resource consumption flaw
Vulnerable OpenSSL included in cryptography wheels
Improper Restriction of Excessive Authentication Attempts in modoboa
Denial of service vulnerability on Password reset page
Apache Airflow AWS Provider Generates Error Message Containing Sensitive Information
Path traversal in spotipy
OpenStack Swift XML external entities (XXE) Injection
Improper Input Validation in pyload-ng
Cross-site Scripting in pyload-ng
Path traversal in binwalk
No protection against brute-force attacks on login page
Apache Airflow Google Provider Improper Input Validation vulnerability
Improper Certificate Validation in pyload-ng
sviehb/jefferson vulnerable to path traversal
Graphite Web Cross-site Scripting vulnerability
Graphite Web Cross-site Scripting vulnerability
Pyload Insufficient Session Expiration vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.