Critical
CVE-2020-7471
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,801
Reset filters
Medium
CVE-2012-6133
Multiple cross-site scripting (XSS) vulnerabilities in Roundup
High
CVE-2020-7965
Cross-Site Request Forgery in Webargs
Medium
CVE-2020-5227
Feedgen Vulnerable to XML Denial of Service Attacks
Low
CVE-2020-5215
Segmentation faultin TensorFlow when converting a Python string to `tf.float16`
High
CVE-2013-1895
Improper Restriction of Excessive Authentication Attempts in py-bcrypt
Medium
CVE-2020-5224
Session key exposure through session list in Django User Sessions
Critical
CVE-2020-7941
Plone Unauthenticated Write Vulnerability
Critical
CVE-2019-16792
HTTP Request Smuggling: Content-Length Sent Twice in Waitress
High
CVE-2019-16791
postfix-mta-sts-resolver Algorithm Downgrade vulnerability
Medium
CVE-2009-3724
Cross-site scripting in markdown2 for python
High
CVE-2015-8549
PyAMF vulnerable to XML external entity (XXE)
High
CVE-2019-16784
Local Privilege Escalation in PyInstaller
Medium
CVE-2020-6173
Client Denial of Service on TUF
Medium
CVE-2019-12398
XSS in Apache Airflow
High
CVE-2020-5390
Improper Verification of Cryptographic Signature in PySAML2
High
CVE-2019-19911
Uncontrolled Resource Consumption in Pillow
High
CVE-2020-5313
Out-of-bounds Read in Pillow
Critical
CVE-2020-5312
PCX P mode buffer overflow in Pillow
Critical
CVE-2020-5311
Buffer Copy without Checking Size of Input in Pillow
Critical
CVE-2020-5310
Integer overflow in Pillow
Medium
CVE-2019-14864
Inclusion of Sensitive Information in Log Files and Improper Output Neutralization for Logs in Ansible
Critical
CVE-2019-14859
Improper Verification of Cryptographic Signature in Pure-Python ECDSA
Unrated
CVE-2019-20008
In Archery before 1.3, inserting an XSS payload into a project name (either by creating a new project or editing an existing one) will result in stored XSS on the vulnerability-scan scheduling page.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.