Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,406
Missing ratelimit on passwrod resets in zenml
Salt preflight script could be attacker controlled
Improper Access Control in janeczku/calibre-web
Cross-site Scripting (XSS) - DOM in janeczku/calibre-web
Generation of Error Message Containing Sensitive Information in janeczku/calibre-web
changedetection.io path traversal using file URI scheme without supplying hostname
ReDoS in giskard's transformation.py (GHSL-2024-324)
Ansible-Core vulnerable to content protections bypass
ansible-core Incorrect Authorization vulnerability
Werkzeug possible resource exhaustion when parsing file data in forms
Starlette Denial of service (DoS) via multipart/form-data
Werkzeug safe_join not safe on Windows
gradio Server Side Request Forgery vulnerability
Flair allows arbitrary code execution
changedetection.io Path Traversal
open-webui allows writing and deleting arbitrary files
MySQL Connector/Python connector takeover vulnerability
Langflow vulnerable to remote code execution
Lord of Large Language Models (LoLLMs) Server path traversal vulnerability in lollms_file_system.py
xhtml2pdf Denial of Service via crafted string
OAuth2 client ID and secret exposed through the web browser
Prevent XSS from Confidant API call
Mesop has a local file Inclusion via static file serving functionality
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.