Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Apache Airflow cross-site scripting due to incomplete fix for CVE-2020-13944
DirectoriesPro by SabaiApps <= 1.3.45 - Reflected Cross-Site Scripting
CHECK-fail in LSTM with zero-length input in TensorFlow
TensorFlow vulnerable to heap out of bounds read in filesystem glob matching
Write to immutable memory region in TensorFlow
Lack of validation in data format attributes in TensorFlow
Uninitialized memory access in TensorFlow
Cross-Site Scripting in Grav
Heap out of bounds access in MakeEdge in TensorFlow
ini before 1.3.6 vulnerable to Prototype Pollution via ini.parse
Page Builder: Pagelayer – Drag and Drop website builder < 1.3.5 - Reflected Cross-Site Scripting via Color Settings
DirectoriesPro Plugin by SabaiApps <= 1.3.45 - Cross-Site Scripting via _drts_form_build_id, _t_ Parameters
Page Builder: Pagelayer – Drag and Drop website builder < 1.3.5 - Reflected Cross-Site Scripting via font-size
Denial of service attack via incorrect parameters in Matrix Synapse
Information Disclosure in Apache Groovy
user-readable api tokens in systemd units for JupyterHub
py vulnerable to Regular Expression Denial of Service
Remote Code Execution (RCE) Exploit on Cross Site Scripting (XSS) Vulnerability
DiveBook <= 1.1.4 - Improper Access Control
Ultimate Member <= 2.1.12 - Cross-Site Scripting
Disabled Hostname Verification in Opencast
Denial of service in fast-csv
Kirby Panel users could upload PHP Phar archives as content files before v2.5.14 and v3.4.5
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.