Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 681
Reset filtersDivision by 0 in `Conv2DBackpropInput`
Division by 0 in `Conv3DBackprop*`
VVE-2021-0002: Incorrect `returndatasize` when using simple forwarder proxies deployed prior to EIP-1167 adoption
SSRF attacks via tracebacks in Plone
Regular Expression Denial of Service (ReDoS) in Pillow
Exposure of Sensitive Information to an Unauthorized Actor in Products.GenericSetup
URL Redirection to Untrusted Site ('Open Redirect') in Products.PluggableAuthService
Exposure of Sensitive Information to an Unauthorized Actor in Products.PluggableAuthService ZODBRoleManager
Regular Expression Denial of Service (REDoS) in httplib2
Django Directory Traversal via archive.extract
Regular Expression Denial of Service in CairoSVG
Base class whitelist configuration ignored in OAuthenticator
XXE in petl
Incorrect Provision of Specified Functionality in qutebrowser
Path Traversal in Ansible
Vyper interfaces returning integer types less than 256 bits can be manipulated if uint256 is used
Path Traversal in Ansible
Catastrophic backtracking in regex allows Denial of Service in Waitress
Session key exposure through session list in Django User Sessions
NLTK Vulnerable To Path Traversal
Django Denial-of-service in django.utils.text.Truncator
Py-EVM is vulnerable to arbitrary bytecode injection
SQL Injection in pycsw
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.