High
CVE-2020-12607
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,309
Reset filters
Medium
CVE-2020-11078
CRLF injection in httplib2
Medium
CVE-2020-10685
Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible
Low
CVE-2020-11054
Incorrect Provision of Specified Functionality in qutebrowser
High
CVE-2020-12690
Insufficient Session Expiration in OpenStack Keystone
Medium
CVE-2020-11037
Potential Observable Timing Discrepancy in Wagtail
Medium
CVE-2020-11010
SQL injection in Tortoise ORM
Medium
CVE-2020-11001
Possible XSS attack in Wagtail
High
CVE-2020-6817
regular expression denial-of-service (ReDoS) in Bleach
Low
ghsa-mr6r-mvw4-736g
Vyper interfaces returning integer types less than 256 bits can be manipulated if uint256 is used
Medium
CVE-2020-6816
Bleach vulnerable to mutation XSS via whitelisted math or svg and raw tag
Medium
CVE-2020-6802
XSS in Bleach when noscript and raw tag whitelisted
Critical
CVE-2020-5262
GitHub personal access token leaking into temporary EasyBuild (debug) logs
Critical
CVE-2020-10594
Django Rest Framework jwt allows obtaining new token from notionally invalidated token
Medium
CVE-2020-5240
2FA bypass through deleting devices in wagtail-2fa
Critical
CVE-2020-10109
HTTP Request Smuggling in Twisted
Low
CVE-2020-1733
Ansible vulnerable to Exposure of Resource to Wrong Sphere and Insecure Temporary File
High
CVE-2020-7212
Uncontrolled Resource Consumption in urllib3
Critical
CVE-2020-6174
Incorrect threshold signature computation in TUF
Medium
CVE-2020-5236
Catastrophic backtracking in regex allows Denial of Service in Waitress
High
CVE-2020-7965
Cross-Site Request Forgery in Webargs
Medium
CVE-2020-5227
Feedgen Vulnerable to XML Denial of Service Attacks
Low
CVE-2020-5215
Segmentation faultin TensorFlow when converting a Python string to `tf.float16`
Medium
CVE-2020-5224
Session key exposure through session list in Django User Sessions
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.