Low
ghsa-74hv-qjjq-h7g5
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,801
Reset filters
Critical
ghsa-mjcr-rqjg-rhg3
Implementation trusts the "me" field returned by the authorization server without verifying it
Medium
CVE-2020-26232
Open redirect in Jupyter Server
High
CVE-2020-26890
Denial of service attack due to invalid JSON
Low
CVE-2020-26215
Open redirect in Jupyter Notebook
Medium
CVE-2020-28724
Open Redirect in werkzeug
High
CVE-2020-8897
Security issues in AWS KMS and AWS Encryption SDKs: in-band protocol negotiation and robustness
High
CVE-2020-25658
Timing attacks in python-rsa
Medium
CVE-2020-15275
malicious SVG attachment causing stored XSS vulnerability
High
CVE-2020-25074
MoinMoin vulnerable to remote code execution via cache action
Critical
Exploited in attacks
CVE-2020-13927
Authentication bypass in Apache Airflow
Critical
CVE-2020-26214
LDAP authentication bypass with empty password
High
CVE-2020-27589
Improper Certificate Validation in blackduck
Medium
CVE-2020-15278
Unauthorized privilege escalation in Mod module
Low
ghsa-2xwp-m7mq-7q3r
CLI does not correctly implement strict mode
High
ghsa-r82c-j4mq-5xfw
Update bitlyshortener to >=0.5.0 to prevent generating some invalid short URLs
Critical
CVE-2020-15271
Markdown-supplied Shell Command Execution
Medium
CVE-2020-15266
Float cast overflow undefined behavior
High
CVE-2020-15265
Segfault in `tf.quantization.quantize_and_dequantize`
Medium
CVE-2020-26891
Cross-site scripting (XSS) vulnerability in the fallback authentication endpoint
Medium
CVE-2020-8929
Ciphertext Malleability Issue in Tink Java
Critical
CVE-2020-27197
libtaxii Server-Side Request Forgery vulnerability
Medium
CVE-2020-26943
Arbitrary Code Execution in blazar-dashboard
Medium
CVE-2020-15251
Privilege Escalation in Channelmgnt plug-in for Sopel
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.