Medium
CVE-2020-19003
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,829
Reset filters
Medium
CVE-2021-41122
missing clamps for decimal args in external functions
High
CVE-2021-41124
Splash authentication credentials potentially leaked to target websites
Medium
CVE-2021-22557
Code Injection in SLO Generator
High
CVE-2021-40325
Cobbler before 3.3.0 allows authorization bypass for modification of settings.
High
CVE-2021-40324
Cobbler before 3.3.0 allows arbitrary file write operations via upload_log_data.
High
CVE-2021-40323
Cobbler before 3.3.0 allows log poisoning
Medium
CVE-2021-25963
Cross-site Scripting in shuup
High
CVE-2021-25962
CSV injection in shuup
High
CVE-2021-41104
Basic auth bypass in esphome
High
CVE-2021-3828
NLTK Vulnerable to REDoS
High
CVE-2021-31606
furlongm openvpn-monitor allows Authorization Bypass to disconnect arbitrary clients
Medium
CVE-2021-31604
furlongm openvpn-monitor allows CSRF to disconnect an arbitrary client
High
CVE-2020-23478
Regular Expression Denial of Service in Leo Editor
High
CVE-2021-3583
Improper Input Validation and Command Injection in Ansible
High
CVE-2021-39229
Apprise vulnerable to regex injection with IFTTT Plugin
High
CVE-2021-32838
Regular Expression Denial of Service in flask-restx
High
CVE-2021-32839
StripComments filter contains a regular expression that is vulnerable to ReDOS (Regular Expression Denial of Service)
Medium
CVE-2021-39216
Wrong type for `Linker`-define functions when used across two `Engine`s
Critical
CVE-2021-39214
Lacking Protection against HTTP Request Smuggling in mitmproxy
High
CVE-2021-40839
The rencode package through 1.0.6 for Python allows an infinite loop in typecode decoding (such as via ;\x2f\x7f), enabling a remote attack that consumes CPU and memory.
Medium
CVE-2021-24040
Due to use of unsafe YAML deserialization logic, an attacker with the ability to modify local YAML configuration files could provide malicious input, resulting in remote code execution or similar risk
Critical
CVE-2021-38540
Missing Authentication for Critical Function in Apache Airflow
Medium
CVE-2021-32805
Flask-AppBuilder Open Redirect vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.