Critical
CVE-2020-7698
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,801
Reset filters
High
CVE-2020-10379
In Pillow before 7.1.0, there are two Buffer Overflows in libImaging/TiffDecode.c.
Medium
CVE-2020-15120
Authorization Bypass in I hate money
High
CVE-2020-7695
HTTP response splitting in uvicorn
High
CVE-2020-7694
Log injection in uvicorn
High
CVE-2020-15118
Cross-Site Scripting in Wagtail
High
CVE-2020-15110
Possible pod name collisions in jupyterhub-kubespawner
Medium
CVE-2020-9485
Stored XSS in Apache Airflow
Medium
CVE-2020-11983
Multiple stored XSS in RBAC Admin screens in Apache Airflow
Critical
CVE-2020-11982
Insecure default config of Celery worker in Apache Airflow
Critical
CVE-2020-11981
Command injection via Celery broker in Apache Airflow
High
Exploited in attacks
CVE-2020-11978
Remote code execution (RCE) in Apache Airflow
Low
CVE-2020-15101
freewvs's nested directory structure can interrupt scan
Low
CVE-2020-15100
freewvs vulnerable to denial of service through large files
Medium
CVE-2020-15105
User passwords are stored in clear text in the Django session
Critical
CVE-2020-11538
Out-of-bounds read in Pillow
High
CVE-2020-10994
Out-of-bounds reads in Pillow
High
CVE-2020-10177
Out-of-bounds reads in Pillow
Medium
ghsa-6r3c-8xf3-ggrr
Directory traversal outside of SENDFILE_ROOT in django-sendfile2
Medium
CVE-2020-4071
Timing attack on django-basic-auth-ip-whitelist
Critical
CVE-2020-14942
Deserialization of Untrusted Data in Tendenci
Critical
CVE-2020-11090
Uncontrolled Resource Consumption in Indy Node
Medium
CVE-2020-13596
XSS in Django
High
CVE-2020-13254
Data leakage via cache key collision in Django
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.