Medium
CVE-2021-43837
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 737
Reset filters
Medium
CVE-2021-25986
Cross-site Scripting in django-wiki
High
CVE-2021-25962
CSV injection in shuup
High
CVE-2021-37678
Arbitrary code execution due to YAML deserialization
Medium
CVE-2021-33026
Deserialization of Untrusted Data in Flask-Caching
High
CVE-2021-32677
Cross-Site Request Forgery (CSRF) in FastAPI
Medium
CVE-2020-29456
Cross-site scripting in papermerge
Low
CVE-2020-15239
Directory Traversal vulnerability in GET/PUT allows attackers to Disclose Information or Write Files via a crafted GET/PUT request
Critical
CVE-2020-11982
Insecure default config of Celery worker in Apache Airflow
High
CVE-2015-8549
PyAMF vulnerable to XML external entity (XXE)
Unrated
CVE-2019-20008
In Archery before 1.3, inserting an XSS payload into a project name (either by creating a new project or editing an existing one) will result in stored XSS on the vulnerability-scan scheduling page.
Medium
CVE-2018-21030
Cross-site scripting in Jupyter Notebook
High
CVE-2019-1010017
XML Injection in python-libnmap
Medium
CVE-2019-12308
Django Cross-site Scripting in AdminURLFieldWidget
High
CVE-2019-9710
Webargs mishandles concurrent JSON parsing
High
CVE-2018-10903
PyCA Cryptography vulnerable to GCM tag forgery
Medium
CVE-2018-5773
markdown2 is vulnerable to cross-site scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.