High
CVE-2021-21336
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,334
Reset filters
High
CVE-2021-1725
botframework-connector vulnerable to Improper Authentication
High
CVE-2021-27923
Pillow Denial of Service by Uncontrolled Resource Consumption
High
CVE-2021-27922
Pillow Uncontrolled Resource Consumption
High
CVE-2021-27921
Pillow Denial of Service by Uncontrolled Resource Consumption
Medium
CVE-2021-21274
Denial of service attack via .well-known lookups
Medium
CVE-2021-21273
Open redirects on some federation and push requests
Low
CVE-2021-21330
`aiohttp` Open Redirect vulnerability (`normalize_path_middleware` middleware)
High
CVE-2020-35681
Django Channels leakage of session identifiers using legacy AsgiHandler
Medium
CVE-2021-26697
Improper Authentication in Apache Airflow
High
CVE-2021-26559
Improper Access Control in Apache Airflow
High
CVE-2021-21240
Regular Expression Denial of Service (REDoS) in httplib2
High
CVE-2020-36242
PyCA Cryptography symmetrically encrypting large values can lead to integer overflow
Medium
CVE-2021-23980
Cross-site scripting in Bleach
Medium
CVE-2020-28493
Regular Expression Denial of Service (ReDoS) in Jinja2
Medium
CVE-2021-21239
Improper Verification of Cryptographic Signature in PySAML2
Medium
CVE-2021-21238
SAML XML Signature wrapping in PySAML2
High
CVE-2020-35654
Pillow Out-of-bounds Write
High
CVE-2021-21236
Regular Expression Denial of Service in CairoSVG
High
CVE-2020-11093
Hyperledger Indy's update process of a DID does not check who signs the request
Medium
CVE-2020-26275
The Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) for Jupyter web applications like Jupyter notebook, JupyterLab, and Voila. In Jupyter Server before version 1
High
CVE-2020-17526
Incorrect Session Validation in Apache Airflow
High
CVE-2020-26263
RSA weakness in tslite-ng
Medium
CVE-2020-17513
SSRF vulnerability in Apache Airflow
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.