Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
ImageMagick has Global Buffer Overflow (OOB Read) via Negative Pixel Index in UIL and XPM Writer
ImageMagick: Heap overflow in sun decoder on 32-bit systems may result in out of bounds write
ImageMagick has Division-by-Zero in YUV sampling factor validation, which leads to crash
ImageMagick has NULL Pointer Dereference in ClonePixelCacheRepository via crafted image
ImageMagick: Code Injection via PostScript header in ps coders
ImageMagick has memory leak of watermark Image object in ReadSTEGANOImage on multiple error/early-return paths
ImageMagick has NULL pointer dereference in ReadSFWImage after DestroyImageInfo (sfw.c)
ImageMagick has heap-buffer-overflow via signed integer overflow in WriteUHDRImage when writing UHDR images with large dimensions
ImageMagick has memory leak in msl encoder
Apache Superset allows authenticated users to view sensitive data without explicit permissions
Apache Superset Improper Authorization allows low-privileged users to bypass access controls
Apache Superset: Read-Only Bypass via Improper Input Validation on PostgreSQL Connections
Apache Superset allows privileged users to conduct error-based SQL Injection
Apache Superset: Incomplete DISALLOWED_SQL_FUNCTIONS default list for ClickHouse engine
ImageMagick: Possible memory leak in ASHLAR encoder
ImageMagick: Out of bounds read in multiple coders read raw pixel data
ImageMagick: Infinite loop vulnerability when parsing a PCD file
ImageMagick: Converting multi-layer nested MVG to SVG can cause DoS
ImageMagick has Possible Heap Information Disclosure in PSD ZIP Decompression
MindsDB: Path Traversal in /api/files Leading to Remote Code Execution
Metro <= 2.13 - Reflected Cross-Site Scripting
Floating Chat Widget: Contact Chat Icons, Telegram Chat, Line Messenger, WeChat, Email, SMS, Call Button – Chaty <= 3.5.1 - Unauthenticated Information Exposure
W3 Total Cache <= 2.9.1 - Unauthenticated Arbitrary Code Execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.