Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,602
Null pointer exception in `DeserializeSparse`
Reference binding to `nullptr` in `tf.ragged.cross`
Heap OOB read in `tf.ragged.cross`
Heap OOB in shape inference for `QuantizeV2`
Heap OOB read in all `tf.raw_ops.QuantizeAndDequantizeV*` ops
Segfault while copying constant resource tensor
Missing validation during checkpoint loading
Heap OOB read in `tf.raw_ops.SparseCountSparseOutput`
Unitialized access in `EinsumHelper::ParseEquation`
Incomplete validation in `tf.summary.create_file_writer`
Overflow/crash in `tf.image.resize` when size is large
Overflow/crash in `tf.tile` when tiling tensor is large
Crashes due to overflow and `CHECK`-fail in ops with large tensor shapes
Crash in `max_pool3d` when size argument is 0 or negative
Crash in `tf.math.segment_*` operations
incomplete JupyterHub logout with simultaneous JupyterLab sessions
Embedded malware in rc
Embedded malware in coa
In libImaging/PcxDecode.c in Pillow before 7.1.0, an out-of-bounds read can occur when reading PCX files where state->shuffle is instructed to read beyond state->buffer.
Inefficient Regular Expression Complexity in validator.js
Reflected cross-site scripting in vaadin-menu-bar webjar resources in Vaadin 14
Missing Authorization with Default Settings in Dashboard UI
Infinite loop in Apache MINA
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.