High
CVE-2021-40978
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,999
Reset filters
High
CVE-2021-41104
Basic auth bypass in esphome
Critical
CVE-2021-39214
Lacking Protection against HTTP Request Smuggling in mitmproxy
Low
CVE-2021-39164
Improper authorisation of members discloses room membership to non-members
Low
CVE-2021-39163
Adding a private/unlisted room to a community exposes room metadata in an unauthorised manner.
High
CVE-2021-39371
XML External Entity Injection in PyWPS
Medium
CVE-2021-35936
Missing Authorization in Apache Airflow
Medium
CVE-2021-37661
Crash caused by integer conversion to unsigned
Medium
CVE-2021-37646
Bad alloc in `StringNGrams` caused by integer conversion
Medium
CVE-2021-37644
`std::abort` raised from `TensorListReserve`
High
CVE-2021-32811
Zope is an open-source web application server. Zope versions prior to versions 4.6.3 and 5.3 have a remote code execution security issue. In order to be affected, one must use Python 3 for one's Zope
Medium
CVE-2021-23401
Open Redirect in Flask-User
High
CVE-2021-32633
Zope is an open-source web application server. In Zope versions prior to 4.6 and 5.2, users can access untrusted modules indirectly through Python modules that are available for direct use. By default
Medium
CVE-2021-23393
Open redirect in Flask-Unchained
High
CVE-2021-32674
Zope is an open-source web application server. This advisory extends the previous advisory at https://github.com/zopefoundation/Zope/security/advisories/GHSA-5pr9-v234-jw36 with additional cases of TA
Medium
CVE-2021-29621
Observable Response Discrepancy in Flask-AppBuilder
High
CVE-2021-33880
Observable Timing Discrepancy in aaugustin websockets library
High
CVE-2021-33511
Server-Side Request Forgery in Plone
Medium
CVE-2021-33510
Server-Side Request Forgery in Plone
Low
CVE-2021-29542
Heap buffer overflow in `StringNGrams`
Low
CVE-2021-29541
Null pointer dereference in `StringNGrams`
Medium
CVE-2021-29471
Denial of service attack via push rule patterns in matrix-synapse
Critical
CVE-2020-13921
**Resolved** Only when using H2/MySQL/TiDB as Apache SkyWalking storage, there is a SQL injection vulnerability in the wildcard query cases.
High
ghsa-qrmm-w4v4-q7f8
Unauthorized access through URL manipulation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.