High
CVE-2018-1000814
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,825
Reset filters
Critical
CVE-2018-20133
Code injection in ymlref
Unrated
CVE-2018-20170
** DISPUTED ** OpenStack Keystone through 14.0.1 has a user enumeration vulnerability because invalid usernames have much faster responses than valid ones for a POST /v3/auth/tokens request. NOTE: the
Medium
CVE-2018-20099
There is an infinite loop in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack.
Medium
CVE-2018-20098
There is a heap-based buffer over-read in Exiv2::Jp2Image::encodeJp2Header of jp2image.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack.
Medium
CVE-2018-20097
There is a SEGV in Exiv2::Internal::TiffParserWorker::findPrimaryGroups of tiffimage_int.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack.
Medium
CVE-2018-20096
There is a heap-based buffer over-read in the Exiv2::tEXtToDataBuf function of pngimage.cpp in Exiv2 0.27-RC3. A crafted input will lead to a remote denial of service attack.
Critical
CVE-2018-20060
Exposure of Sensitive Information to an Unauthorized Actor in urllib3
Medium
CVE-2018-19787
Improper Neutralization of Input During Web Page Generation in LXML
High
CVE-2018-19443
Session Fixation in Tryton
Medium
CVE-2018-19352
Jupyter Notebook XSS via directory name
Medium
CVE-2018-19351
Jupyter Notebook XSS via untrusted notebooks
High
CVE-2018-18920
Py-EVM is vulnerable to arbitrary bytecode injection
Critical
CVE-2018-8021
Deserialization of Untrusted Data in superset
High
CVE-2015-5159
Improper Input Validation in kdcproxy
Medium
CVE-2017-5934
Moderate severity vulnerability that affects moin
High
CVE-2018-18074
Insufficiently Protected Credentials in Requests
High
CVE-2018-1000809
privacyIDEA Improper Input Validation vulnerability
High
CVE-2018-1000808
Pyopenssl Incorrect Memory Management
High
CVE-2018-1000807
PyOpenSSL Use-After-Free vulnerability
High
CVE-2018-1000805
Paramiko Authentication Bypass vulnerability
Medium
CVE-2018-16984
Django allows unprivileged users to read the password hashes of arbitrary accounts
Medium
CVE-2018-17175
In marshmallow library the schema "only" option treats an empty list as implying no "only" option
High
CVE-2018-1000523
topydo contains a CWE-20: Improper Input Validation vulnerability in ListFormatParser::parse, file topydo/lib/ListFormat.py line 292 as of d4f843dac71308b2f29a7c2cdc76f055c3841523 that can result in I
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.