Medium
CVE-2018-15750
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,997
Reset filters
High
CVE-2013-1909
The Python client in Apache Qpid before 2.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which all
High
CVE-2017-7466
Ansible before version 2.3 has an input validation vulnerability in the handling of data sent from client systems. An attacker with control over a client system being managed by Ansible, and the abili
Medium
CVE-2013-0306
The form library in Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 allows remote attackers to bypass intended resource limits for formsets and cause a denial of serv
Medium
CVE-2013-2255
OpenStack Keystone and other components vulnerable to Improper Certificate Validation
Critical
CVE-2009-2701
Unspecified vulnerability in the Zope Enterprise Objects (ZEO) storage-server functionality in Zope Object Database (ZODB) 3.8 before 3.8.3 and 3.9.x before 3.9.0c2, when certain ZEO database sharing
High
CVE-2009-2659
The Admin media handler in core/servers/basehttp.py in Django 1.0 and 0.96 does not properly map URL requests to expected "static media files," which allows remote attackers to conduct directory trave
Critical
CVE-2008-1475
The xml-rpc server in Roundup 1.4.4 does not check property permissions, which allows attackers to bypass restrictions and edit or read restricted properties via the (1) list, (2) display, and (3) set
Medium
CVE-2022-24880
Potential Captcha Validate Bypass in flask-session-captcha
High
CVE-2022-28108
Selenium Server (Grid) CSRF
High
CVE-2022-24758
The Jupyter notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.9, unauthorized actors can access sensitive information from server logs. Anytime a 5xx error i
Critical
CVE-2022-24801
Inconsistent Interpretation of HTTP Requests in twisted.web
High
CVE-2022-24798
Improper Removal of Sensitive Information Before Storage or Transfer in irrd
High
CVE-2022-22936
An issue was discovered in SaltStack Salt in versions before 3002.8, 3003.4, 3004.1. Job publishes and file server replies are susceptible to replay attacks, which can result in an attacker replaying
High
CVE-2022-24757
The Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) for Jupyter web applications. Prior to version 1.15.4, unauthorized actors can access sensitive information f
Critical
CVE-2022-24766
Insufficient Protection against HTTP Request Smuggling in mitmproxy
High
CVE-2022-24761
HTTP Request Smuggling in waitress
Critical
ghsa-32gv-6cf3-wcmq
HTTP/2 DoS Attacks: Ping, Reset, and Settings Floods
High
CVE-2022-25508
Improper Authentication in FreeTAKServer
High
CVE-2022-25510
Hard coded credentials in FreeTAKServer
High
CVE-2022-26662
XML Entity Expansion in trytond and proteus
Medium
CVE-2022-26661
Improper Restriction of XML External Entity Reference in trytond and proteus
Critical
CVE-2022-0766
Server-Side Request Forgery in calibreweb
Critical
CVE-2022-0767
Server-Side Request Forgery in calibreweb
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.