Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,341
Reset filtersCode injection in nbgitpuller
Incorrect Access Control in Lin-CMS-Flask v0.1.1 allows remote attackers to obtain sensitive information and/or gain privileges due to the application not invalidating a user's authentication token up
Missing Authorization in Apache Airflow
Path Traversal in bikshed
OS Command Injection in bikeshed
Improper Authorization and Origin Validation Error in OneFuzz
Segfault on strings tensors with mistmatched dimensions, due to Go code
FPE in LSH in TFLite
Heap OOB in TFLite's `Gather*` implementations
Heap OOB in TFLite
FPE in TFLite pooling operations
FPE in TFLite division operations
Use of unitialized value in TFLite
Heap OOB in nested `tf.map_fn` with `RaggedTensor`s
Missing validation in shape inference for `Dequantize`
Incomplete validation in `MaxPoolGrad`
`CHECK`-fail in `MapStage`
Heap OOB in `SdcaOptimizerV2`
Heap OOB in `UpperBound` and `LowerBound`
Crash in NMS ops caused by integer conversion to unsigned
FPE in `tf.raw_ops.UnravelIndex`
Incomplete validation in MKL requantization
Incomplete validation in `QuantizeV2`
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.