Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,861
Reset filtersOpenStack Oslo utility sensitive information exposure via log files
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity
Matrix Synapse Authorization Error
Matrix Synapse Improper Signature Validation
MapProxy vulnerable to cross-site scripting in demo service
keycloak-httpd-client-install Insecure Secrets
OpenStack Nova VMware instance leak potentially leading to compute DoS
OpenStack Glance v2 API unrestricted path traversal through filesystem:// scheme
keycloak-httpd-client-install symlink attack vulnerability
web2py exposure of sensitive information
In Trail of Bits fickling versions up to and including 0.1.11, the UnsafeImportsML analysis pass unconditionally calls AnalysisContext.shorten_code(node) on every import node it inspects, regardless o
Trail of Bits fickling versions up to and including 0.1.10 do not include the Python standard library modules _posixsubprocess, site, and atexit in the UNSAFE_IMPORTS denylist (fickle.py). Because the
In nltk/nltk versions 3.9.3 and earlier, five Stanford interface classes (StanfordPOSTagger, StanfordNERTagger, StanfordParser, StanfordDependencyParser, and StanfordNeuralDependencyParser) are vulner
Openstack tripleo-heat-templates unauthenticated file access
OpenStack Nova Filter Scheduler Bypass
OpenStack Nova DoS by rebuilding the same instance with a new image multiple times
OpenStack Nova Denial of service attack on the compute host
Kallithea Routes CSRF Bypass
MySQL Connectors Privilege Escalation
Matrix Synapse Security Filtering Flaw
Cobbler Arbitrary File Read
Openstack Aodh can be used to launder Keystone trusts
OpenStack Keystone Logs Passwords
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.