Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Cross-site Scripting in NodeBB
Blog Designer <=1.8.10 - Unauthenticated Stored Cross-Site Scripting
Exposure of Sensitive Information to an Unauthorized Actor in Keycloak
My Calendar <= 3.1.9 - Unauthenticated Cross-Site Scripting
RSVPMaker <= 6.1.9 - SQL Injection
Print My Blog <= 1.6.6 - Server-Side Request Forgery
WooCommerce Checkout Manager <= 4.2.6 - Unauthenticated Arbitrary Media Deletion
Phoca Gallery - Other
Google TensorFlow 1.7.x and earlier is affected by a Buffer Overflow vulnerability. The type of exploitation is context-dependent.
NULL pointer dereference in Google TensorFlow before 1.12.2 could cause a denial of service via an invalid GIF file.
Memcpy parameter overlap in Google Snappy library 1.1.4, as used in Google TensorFlow before 1.7.1, could result in a crash or read from other parts of process memory.
Invalid memory access and/or a heap buffer overflow in the TensorFlow XLA compiler in Google TensorFlow before 1.7.1 could cause a crash or read from other parts of process memory via a crafted config
Cross-site Scripting in Apache Zeppelin
Session Fixation in Apache Zeppelin
Improper Authentication in Apache Zeppelin
JobCareer | Job Board Responsive WordPress Theme <= 2.5.1 - Stored Cross-Site Scripting
WP Database Backup < 5.2 - Unauthenticated OS Command Injection
Google TensorFlow 1.7 and below is affected by: Buffer Overflow. The impact is: execute arbitrary code (local).
Google TensorFlow 1.6.x and earlier is affected by: Null Pointer Dereference. The type of exploitation is: context-dependent.
Information Exposure vulnerability in Eclipse Jetty
Installation information leak in Eclipse Jetty
Cross-site Scripting in Eclipse Jetty
Billion laughs attack in c3p0
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.