Critical
CVE-2019-13177
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,330
Reset filters
High
CVE-2019-12761
Code Injection in PyXDG
Critical
CVE-2019-12300
Improper Authentication in Buildbot
High
CVE-2019-11324
Improper Certificate Validation in urllib3
Medium
CVE-2019-11358
XSS in jQuery as used in Drupal, Backdrop CMS, and other products
High
CVE-2019-0229
Apache Airflow vulnerable to CSRF Attacks
Medium
CVE-2019-0216
Apache Airflow vulnerable to Stored XSS
High
CVE-2019-10906
Jinja2 sandbox escape via string formatting
High
CVE-2018-12680
CoAPthon DoS due to Exceptions
High
CVE-2018-12679
CoAPthon3 vulnerable to Deserialization of Untrusted Data
Medium
CVE-2018-20244
Apache Airflow vulnerable to Stored XSS
Critical
CVE-2019-7164
SQLAlchemy vulnerable to SQL Injection via order_by parameter
High
CVE-2019-7560
Boolector use after free
High
CVE-2019-1000007
Depth counting error in guard() leading to multiple potential security issues in aioxmpp
High
CVE-2018-20245
Improper Certificate Validation in Apache Airflow
Critical
CVE-2017-17836
Apache Airflow vulnerable to XSS
High
CVE-2017-17835
Cross-Site Request Forgery (CSRF) in Apache Airflow
High
CVE-2017-15720
Improper Input Validation in Apache Airflow resulting in Remote Code Execution
High
CVE-2019-3498
Improper Input Validation in Django
High
CVE-2018-1000872
PyKMIP Denial of service vulnerability
High
CVE-2018-1000843
Cross-Site Request Forgery (CSRF) in Luigi
High
CVE-2018-1000814
aiohttp-session creates non-expiring sessions
High
CVE-2018-19443
Session Fixation in Tryton
Medium
CVE-2018-19352
Jupyter Notebook XSS via directory name
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.