High
CVE-2015-1326
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,817
Reset filters
High
CVE-2019-11324
Improper Certificate Validation in urllib3
Medium
CVE-2019-11358
XSS in jQuery as used in Drupal, Backdrop CMS, and other products
High
CVE-2017-11427
Python-saml allows manipulation of SAML data without invalidation of cryptographic signature
Medium
CVE-2019-11236
Improper Neutralization of CRLF Sequences in urllib3 library for Python
High
CVE-2019-0229
Apache Airflow vulnerable to CSRF Attacks
Medium
CVE-2019-0216
Apache Airflow vulnerable to Stored XSS
High
CVE-2019-10868
In trytond/model/modelstorage.py in Tryton 4.2 before 4.2.21, 4.4 before 4.4.19, 4.6 before 4.6.14, 4.8 before 4.8.10, and 5.0 before 5.0.6, an authenticated user can order records based on a field fo
High
CVE-2016-10745
Jinja2 sandbox escape vulnerability
High
CVE-2019-10906
Jinja2 sandbox escape via string formatting
Medium
CVE-2019-10904
Moderate severity vulnerability that affects roundup
Medium
CVE-2019-10856
Jupyter Notebook open redirect vulnerability
High
CVE-2018-12680
CoAPthon DoS due to Exceptions
High
CVE-2018-12679
CoAPthon3 vulnerable to Deserialization of Untrusted Data
Medium
CVE-2019-10255
Open Redirect vulnerability in jupyterhub and notebook
Low
CVE-2019-3828
Ansible Path Traversal vulnerability
Critical
CVE-2019-7539
ipycache is vulnerable to Code Injection
Critical
CVE-2019-5729
splunk-sdk does not properly verify untrusted TLS server certificates
Medium
CVE-2018-1334
In Apache Spark 1.0.0 to 2.1.2, 2.2.0 to 2.2.1, and 2.3.0, when using PySpark or SparkR, it's possible for a different local user to connect to the Spark application and impersonate the user running t
High
CVE-2019-9710
Webargs mishandles concurrent JSON parsing
Medium
CVE-2018-20244
Apache Airflow vulnerable to Stored XSS
Critical
CVE-2019-7164
SQLAlchemy vulnerable to SQL Injection via order_by parameter
High
CVE-2019-6975
Uncontrolled Memory Consumption in Django
High
CVE-2019-7560
Boolector use after free
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.