High
CVE-2020-12607
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,801
Reset filters
High
CVE-2020-13757
Python-RSA decryption of ciphertext leads to DoS
Critical
CVE-2020-13388
OS Command Injection in jw.util
Medium
CVE-2020-7655
HTTP Request Smuggling in netius
Medium
CVE-2020-11078
CRLF injection in httplib2
Unrated
CVE-2020-13091
** DISPUTED ** pandas through 1.0.3 can unserialize and execute commands from an untrusted file that is passed to the read_pickle() function, if __reduce__ makes an os.system call. NOTE: third parties
Low
CVE-2020-10744
Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible
Medium
CVE-2020-1746
Exposure of Sensitive Information to an Unauthorized Actor in ansible
Medium
CVE-2020-10685
Exposure of Resource to Wrong Sphere and Insecure Temporary File in Ansible
Low
CVE-2020-11054
Incorrect Provision of Specified Functionality in qutebrowser
High
CVE-2020-12690
Insufficient Session Expiration in OpenStack Keystone
High
CVE-2018-21233
TensorFlow before 1.7.0 has an integer overflow that causes an out-of-bounds read, possibly causing disclosure of the contents of process memory. This occurs in the DecodeBmp feature of the BMP decode
Medium
CVE-2020-11037
Potential Observable Timing Discrepancy in Wagtail
Medium
CVE-2020-10691
Path Traversal in Ansible
Medium
CVE-2020-11010
SQL injection in Tortoise ORM
Medium
CVE-2020-11888
XSS in python-markdown2
Medium
CVE-2020-11001
Possible XSS attack in Wagtail
High
CVE-2019-14905
Externally Controlled Reference to a Resource in Another Sphere, Improper Input Validation, and External Control of File Name or Path in Ansible
High
CVE-2020-6817
regular expression denial-of-service (ReDoS) in Bleach
Low
ghsa-mr6r-mvw4-736g
Vyper interfaces returning integer types less than 256 bits can be manipulated if uint256 is used
Medium
CVE-2020-6816
Bleach vulnerable to mutation XSS via whitelisted math or svg and raw tag
Medium
CVE-2020-6802
XSS in Bleach when noscript and raw tag whitelisted
Medium
CVE-2020-10684
Code Injection, Race Condition, and Execution with Unnecessary Privileges in Ansible
Medium
CVE-2020-5252
Malicious package may avoid detection in python auditing
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.