Medium
CVE-2020-26268
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,330
Reset filters
Low
CVE-2020-26267
Lack of validation in data format attributes in TensorFlow
Medium
CVE-2020-26266
Uninitialized memory access in TensorFlow
Medium
CVE-2020-26271
Heap out of bounds access in MakeEdge in TensorFlow
High
CVE-2020-26257
Denial of service attack via incorrect parameters in Matrix Synapse
High
CVE-2020-26261
user-readable api tokens in systemd units for JupyterHub
High
CVE-2020-26244
Multiple cryptographic issues in Python oic
Low
ghsa-47qg-q58v-7vrp
UNEDITABLE_SCHEMAS and UNEDITABLE_TABLE_DESCRIPTION_MATCH_RULES not respected by frontend service backend
Medium
CVE-2020-29456
Cross-site scripting in papermerge
High
CVE-2020-26250
Base class whitelist configuration ignored in OAuthenticator
Low
ghsa-74hv-qjjq-h7g5
datasette-graphql leaks details of the schema of private database files
Critical
ghsa-mjcr-rqjg-rhg3
Implementation trusts the "me" field returned by the authorization server without verifying it
Medium
CVE-2020-26232
Open redirect in Jupyter Server
High
CVE-2020-26890
Denial of service attack due to invalid JSON
Low
CVE-2020-26215
Open redirect in Jupyter Notebook
High
CVE-2020-8897
Security issues in AWS KMS and AWS Encryption SDKs: in-band protocol negotiation and robustness
Medium
CVE-2020-15275
malicious SVG attachment causing stored XSS vulnerability
High
CVE-2020-25074
MoinMoin vulnerable to remote code execution via cache action
Critical
Exploited in attacks
CVE-2020-13927
Authentication bypass in Apache Airflow
Critical
CVE-2020-26214
LDAP authentication bypass with empty password
High
CVE-2020-27589
Improper Certificate Validation in blackduck
High
ghsa-r82c-j4mq-5xfw
Update bitlyshortener to >=0.5.0 to prevent generating some invalid short URLs
Medium
CVE-2020-15266
Float cast overflow undefined behavior
High
CVE-2020-15265
Segfault in `tf.quantization.quantize_and_dequantize`
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.