Unrated
CVE-2018-0525
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,825
Reset filters
Unrated
CVE-2018-0524
Jubatus 1.0.2 and earlier allows remote code execution via unspecified vectors.
Critical
CVE-2018-7753
Bleach URI Scheme Restriction Bypass
High
CVE-2018-7206
JupyterHub OAuthenticator elevation of privilege
High
CVE-2018-6188
Django vulnerable to information leakage in AuthenticationForm
Critical
CVE-2018-6596
Django-Anymail prone to a timing attack
High
CVE-2018-6594
Pycrypto generates weak key parameters
Medium
CVE-2018-5773
markdown2 is vulnerable to cross-site scripting
High
CVE-2014-1859
Numpy arbitrary file write via symlink attack
High
CVE-2014-1858
Arbitrary file write in NumPy
Medium
CVE-2017-1000484
Plone Open Redirect
Critical
CVE-2017-1000433
pysaml2 Improper Authentication vulnerability
Medium
CVE-2017-16876
mistune Cross-site scripting (XSS) vulnerability
Unrated
CVE-2017-17555
The swri_audio_convert function in audioconvert.c in FFmpeg libswresample through 3.0.101, as used in FFmpeg 3.4.1, aubio 0.4.6, and other products, allows remote attackers to cause a denial of servic
Medium
CVE-2017-1000246
Pysaml2 improperly initializes encryption vector
Critical
CVE-2017-0906
Recurly vulnerable to SSRF
Critical
CVE-2017-16764
django_make_app is vulnerable to Code Injection
Critical
CVE-2017-16763
Unsafe deserialization in confire
Critical
CVE-2017-16618
Unsafe deserialization in owlmixin
Critical
CVE-2017-16616
Unsafe pyyaml load usage in PyAnyAPI
Critical
CVE-2017-16615
Unsafe deserialization in MLAlchemy
Medium
CVE-2016-10516
Pallets Werkzeug cross-site scripting vulnerability
Medium
CVE-2017-15612
Cross-site Scripting in Mistune
High
CVE-2017-1002153
Koji blacklisted paths workaround
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.