Critical
CVE-2019-20477
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,828
Reset filters
Critical
CVE-2020-6174
Incorrect threshold signature computation in TUF
Medium
CVE-2020-5236
Catastrophic backtracking in regex allows Denial of Service in Waitress
Critical
CVE-2020-7471
SQL injection in Django
Medium
CVE-2012-6133
Multiple cross-site scripting (XSS) vulnerabilities in Roundup
High
CVE-2020-7965
Cross-Site Request Forgery in Webargs
Medium
CVE-2020-5227
Feedgen Vulnerable to XML Denial of Service Attacks
Low
CVE-2020-5215
Segmentation faultin TensorFlow when converting a Python string to `tf.float16`
High
CVE-2013-1895
Improper Restriction of Excessive Authentication Attempts in py-bcrypt
Medium
CVE-2020-5224
Session key exposure through session list in Django User Sessions
Critical
CVE-2020-7941
Plone Unauthenticated Write Vulnerability
Critical
CVE-2019-16792
HTTP Request Smuggling: Content-Length Sent Twice in Waitress
High
CVE-2019-16791
postfix-mta-sts-resolver Algorithm Downgrade vulnerability
Medium
CVE-2009-3724
Cross-site scripting in markdown2 for python
High
CVE-2015-8549
PyAMF vulnerable to XML external entity (XXE)
High
CVE-2019-16784
Local Privilege Escalation in PyInstaller
Medium
CVE-2020-6173
Client Denial of Service on TUF
Medium
CVE-2019-12398
XSS in Apache Airflow
High
CVE-2020-5390
Improper Verification of Cryptographic Signature in PySAML2
High
CVE-2019-19911
Uncontrolled Resource Consumption in Pillow
High
CVE-2020-5313
Out-of-bounds Read in Pillow
Critical
CVE-2020-5312
PCX P mode buffer overflow in Pillow
Critical
CVE-2020-5311
Buffer Copy without Checking Size of Input in Pillow
Critical
CVE-2020-5310
Integer overflow in Pillow
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.