Low
CVE-2021-29513
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,828
Reset filters
Low
CVE-2021-29554
Division by 0 in `DenseCountSparseOutput`
Low
CVE-2021-29512
Heap buffer overflow in `RaggedBinCount`
Medium
CVE-2021-29510
Use of "infinity" as an input to datetime and date fields causes infinite loop in pydantic
Medium
CVE-2021-29471
Denial of service attack via push rule patterns in matrix-synapse
Critical
CVE-2020-13921
**Resolved** Only when using H2/MySQL/TiDB as Apache SkyWalking storage, there is a SQL injection vulnerability in the wildcard query cases.
Medium
CVE-2021-21419
Improper Handling of Highly Compressed Data (Data Amplification) and Memory Allocation with Excessive Size Value in eventlet
Medium
CVE-2021-32091
Cross-site scripting in LocalStack
Critical
CVE-2021-32090
Command injection in LocalStack
Medium
CVE-2021-32052
Header injection possible in Django
High
ghsa-qrmm-w4v4-q7f8
Unauthorized access through URL manipulation
High
CVE-2021-31542
Path Traversal in Django
Critical
CVE-2021-31800
Path traversal in impacket
Medium
CVE-2021-28359
Cross-site Scripting in Apache Airflow
High
CVE-2020-13952
In the course of work on the open source project it was discovered that authenticated users running queries against Hive and Presto database engines could access information via a number of templated
High
CVE-2020-15225
Potential DoS with NumberFilter conversion to integer values.
High
CVE-2021-20228
Ansible Exposes Sensitive Information
Medium
ghsa-jgpv-4h4c-xhw3
Uncontrolled Resource Consumption in pillow
High
CVE-2021-31607
Command Injection in SaltStack Salt
Critical
CVE-2020-1747
A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method o
High
CVE-2021-29434
Improper validation of URLs ('Cross-site Scripting') in Wagtail rich text fields
Medium
ghsa-22wc-c9wj-6q2v
VVE-2021-0001: Memory corruption using function calls within arrays
Low
ghsa-375m-5fvv-xq23
VVE-2021-0002: Incorrect `returndatasize` when using simple forwarder proxies deployed prior to EIP-1167 adoption
Medium
CVE-2021-29432
Malicious users could abuse Sydent to control the content of invitation emails
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.