Critical
CVE-2019-7539
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,825
Reset filters
Critical
CVE-2019-5729
splunk-sdk does not properly verify untrusted TLS server certificates
Medium
CVE-2018-1334
In Apache Spark 1.0.0 to 2.1.2, 2.2.0 to 2.2.1, and 2.3.0, when using PySpark or SparkR, it's possible for a different local user to connect to the Spark application and impersonate the user running t
High
CVE-2019-9710
Webargs mishandles concurrent JSON parsing
Medium
CVE-2018-20244
Apache Airflow vulnerable to Stored XSS
Critical
CVE-2019-7164
SQLAlchemy vulnerable to SQL Injection via order_by parameter
High
CVE-2019-6975
Uncontrolled Memory Consumption in Django
High
CVE-2019-7560
Boolector use after free
Critical
CVE-2019-7548
SQLAlchemy is vulnerable to SQL Injection via group_by parameter
High
CVE-2019-1000007
Depth counting error in guard() leading to multiple potential security issues in aioxmpp
Medium
CVE-2018-11760
Pyspark User Impersonation Vulnerability
High
CVE-2017-18361
Pylons Colander Denial of Service vulnerability
Medium
CVE-2019-6802
CRLF Injection in pypiserver
High
CVE-2018-20245
Improper Certificate Validation in Apache Airflow
Critical
CVE-2017-17836
Apache Airflow vulnerable to XSS
High
CVE-2017-17835
Cross-Site Request Forgery (CSRF) in Apache Airflow
High
CVE-2017-15720
Improper Input Validation in Apache Airflow resulting in Remote Code Execution
Critical
CVE-2019-6446
Numpy Deserialization of Untrusted Data
Critical
CVE-2017-1002157
modulemd uses an unsafe function for processing externally provided data
High
CVE-2019-3498
Improper Input Validation in Django
High
CVE-2019-3575
sqla-yaml-fixtures is vulnerable to Code Injection
High
CVE-2018-20325
Code injection in Danijar Definitions
High
CVE-2018-1000872
PyKMIP Denial of service vulnerability
High
CVE-2018-1000843
Cross-Site Request Forgery (CSRF) in Luigi
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.