Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,319
Reset filtersAn issue was discovered in the Dask distributed package before 2021.10.0 for Python. Single machine Dask clusters started with dask.distributed.LocalCluster or dask.distributed.Client (which defaults
Maliciously Crafted Model Archive Can Lead To Arbitrary File Write
Arbitrary command execution on Windows via qutebrowserurl: URL handler
Client metadata path-traversal
Scrapy HTTP authentication credentials potentially leaked to target websites
Splash authentication credentials potentially leaked to target websites
Lacking Protection against HTTP Request Smuggling in mitmproxy
Adding a private/unlisted room to a community exposes room metadata in an unauthorised manner.
Improper Authorization and Origin Validation Error in OneFuzz
Heap OOB in TFLite
Integer division by 0 in sparse reshaping
Memory access due to code generation flaw in Cranelift module
Integer overflow in TFLite memory allocation
Heap OOB write in TFLite
Null pointer dereference in TFLite's `Reshape` operator
Heap buffer overflow in `MaxPoolGrad`
Heap buffer overflow in `StringNGrams`
Division by zero in `Conv2DBackpropFilter`
Division by 0 in `Conv2DBackpropInput`
Division by 0 in `Conv3DBackprop*`
CHECK-fail in SparseCross due to type confusion
Type confusion during tensor casts lead to dereferencing null pointers
Unauthorized access through URL manipulation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.