Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,829
Reset filtersOpen Redirect in archivy
Code Injection in GitHub repository pytorchlightning/pytorch-lightning prior to 1.6.0.
Twisted SSH client and server deny of service during SSH handshake.
Ansible discloses sensitive information in traceback error message
Incorrect Authorization and Exposure of Sensitive Information to an Unauthorized Actor in scrapy
Scrapy cookie-setting is not restricted based on the public suffix list
Cross-site Scripting in Weblate
OS Command injection in Apache Airflow
Apache Airflow Cross-site Scripting Vulnerability
B2 Command Line Tool is the official command line tool for the backblaze cloud storage service. Linux and Mac releases of the B2 command-line tool version 3.2.0 and below contain a key disclosure vuln
b2-sdk-python TOCTOU application key disclosure
Insecure Temporary File in mlflow
Incorrect Default Permissions in Cobbler
Command Injection in Cobbler
Server crash if running Python 3.10 w/ Sanic 20.12
A flaw was found in Mercurial before 4.9. It was possible to use symlinks and subrepositories to defeat Mercurial's path-checking logic and write files outside a repository.
In Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configured to require authentication (spark.authenticate) via a shared secret. When enabled, however, a specially-craft
`CHECK`-failures in binary ops in Tensorflow
`CHECK`-failures in `TensorByteSize` in Tensorflow
`CHECK`-failures during Grappler's `SafeToRemoveIdentity` in Tensorflow
Memory leak in Tensorflow
Integer overflow in Tensorflow
Integer overflow in Tensorflow
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.