High
CVE-2020-35681
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,828
Reset filters
High
CVE-2020-28463
Server-side Request Forgery (SSRF) via img tags in reportlab
Medium
CVE-2021-26697
Improper Authentication in Apache Airflow
High
CVE-2021-26559
Improper Access Control in Apache Airflow
Critical
CVE-2020-14343
Improper Input Validation in PyYAML
High
CVE-2021-21240
Regular Expression Denial of Service (REDoS) in httplib2
Low
ghsa-4ph2-8337-hm62
Key Caching behavior in the DynamoDB Encryption Client.
High
CVE-2020-36242
PyCA Cryptography symmetrically encrypting large values can lead to integer overflow
Medium
CVE-2021-26722
LinkedIn Oncall vulnerable to Cross-Site Scripting
Medium
CVE-2021-23980
Cross-site scripting in Bleach
Medium
CVE-2021-3281
Django Directory Traversal via archive.extract
Medium
CVE-2020-28493
Regular Expression Denial of Service (ReDoS) in Jinja2
Medium
CVE-2021-21239
Improper Verification of Cryptographic Signature in PySAML2
Medium
CVE-2021-21238
SAML XML Signature wrapping in PySAML2
Medium
CVE-2020-28473
bottle HTTP Request smuggling
Medium
CVE-2020-36191
Cross-Site Request Forgery in JupyterHub
Medium
CVE-2020-35655
Pillow Out-of-bounds Read
High
CVE-2020-35654
Pillow Out-of-bounds Write
High
CVE-2020-35653
Pillow Out-of-bounds Read
High
CVE-2021-21241
CSRF can expose users authentication token
High
CVE-2020-25659
RSA decryption vulnerable to Bleichenbacher timing vulnerability
High
CVE-2020-13922
Incorrect Default Permissions in Apache DolphinScheduler
High
CVE-2021-3116
Logic error in authentication in proxy.py
Critical
CVE-2020-28468
pwntools Server-Side Template Injection (SSTI) vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.