Medium
CVE-2020-11983
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,817
Reset filters
Critical
CVE-2020-11982
Insecure default config of Celery worker in Apache Airflow
Critical
CVE-2020-11981
Command injection via Celery broker in Apache Airflow
High
Exploited in attacks
CVE-2020-11978
Remote code execution (RCE) in Apache Airflow
Low
CVE-2020-15101
freewvs's nested directory structure can interrupt scan
Low
CVE-2020-15100
freewvs vulnerable to denial of service through large files
Medium
CVE-2020-15105
User passwords are stored in clear text in the Django session
Critical
CVE-2020-11538
Out-of-bounds read in Pillow
High
CVE-2020-10994
Out-of-bounds reads in Pillow
High
CVE-2020-10177
Out-of-bounds reads in Pillow
Medium
ghsa-6r3c-8xf3-ggrr
Directory traversal outside of SENDFILE_ROOT in django-sendfile2
Medium
CVE-2020-4071
Timing attack on django-basic-auth-ip-whitelist
Critical
CVE-2020-14942
Deserialization of Untrusted Data in Tendenci
Critical
CVE-2020-11090
Uncontrolled Resource Consumption in Indy Node
Medium
CVE-2020-13596
XSS in Django
High
CVE-2020-13254
Data leakage via cache key collision in Django
High
CVE-2020-12607
Improper Verification of Cryptographic Signature in fastecdsa
High
CVE-2020-13757
Python-RSA decryption of ciphertext leads to DoS
Critical
CVE-2020-13388
OS Command Injection in jw.util
Medium
CVE-2020-7655
HTTP Request Smuggling in netius
Medium
CVE-2020-11078
CRLF injection in httplib2
Unrated
CVE-2020-13091
** DISPUTED ** pandas through 1.0.3 can unserialize and execute commands from an untrusted file that is passed to the read_pickle() function, if __reduce__ makes an os.system call. NOTE: third parties
Low
CVE-2020-10744
Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible
Medium
CVE-2020-1746
Exposure of Sensitive Information to an Unauthorized Actor in ansible
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.