Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 685
Reset filtersDjango Denial-of-service in django.utils.text.Truncator
Py-EVM is vulnerable to arbitrary bytecode injection
SQL Injection in pycsw
oslo.middleware Information Disclosure vulnerability
Ajenti version version 2 contains a Improper Error Handling vulnerability in Login JSON request that can result in The requisition leaks a path of the server. This attack appear to be exploitable via
django-anymail Includes Sensitive Information in Log Files
Django Denial-of-service possibility in truncatechars_html and truncatewords_html template filters
Django denial-of-service possibility in urlize and urlizetrunc template filters
Django-Anymail prone to a timing attack
Apache Atlas produces Stack trace in error response
Improper Link Resolution Before File Access in logilab-commons
Libextractor multiple heap-based buffer overflows
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.