Critical
ghsa-32gv-6cf3-wcmq
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 696
Reset filters
Medium
CVE-2022-24737
Exposure of Sensitive Information to an Unauthorized Actor in httpie
High
CVE-2022-21716
Twisted SSH client and server deny of service during SSH handshake.
Medium
CVE-2021-3620
Ansible discloses sensitive information in traceback error message
Medium
CVE-2022-23590
Crash due to erroneous `StatusOr` in TensorFlow
Medium
CVE-2021-43818
lxml's HTML Cleaner allows crafted and SVG embedded scripts to pass through
Medium
CVE-2024-21910
Cross-site scripting vulnerability in TinyMCE plugins
High
CVE-2021-41127
Maliciously Crafted Model Archive Can Lead To Arbitrary File Write
High
CVE-2021-32839
StripComments filter contains a regular expression that is vulnerable to ReDOS (Regular Expression Denial of Service)
High
CVE-2021-32806
URL Redirection to Untrusted Site ('Open Redirect') in Products.isurlinportal
High
CVE-2021-33503
Catastrophic backtracking in URL authority parser when passed URL containing many @ characters
Medium
CVE-2021-32681
Cross-site Scripting in wagtail
High
CVE-2021-32677
Cross-Site Request Forgery (CSRF) in FastAPI
Medium
CVE-2021-32670
Reflected cross-site scripting issue in Datasette
Low
CVE-2021-29548
Division by 0 in `QuantizedBatchNormWithGlobalNormalization`
Low
CVE-2021-29531
CHECK-fail in tf.raw_ops.EncodePng
Low
CVE-2021-29525
Division by 0 in `Conv2DBackpropInput`
Low
CVE-2021-29522
Division by 0 in `Conv3DBackprop*`
Low
ghsa-375m-5fvv-xq23
VVE-2021-0002: Incorrect `returndatasize` when using simple forwarder proxies deployed prior to EIP-1167 adoption
High
CVE-2020-28735
SSRF attacks via tracebacks in Plone
Medium
CVE-2021-25292
Regular Expression Denial of Service (ReDoS) in Pillow
Medium
CVE-2021-21360
Exposure of Sensitive Information to an Unauthorized Actor in Products.GenericSetup
Medium
CVE-2021-21337
URL Redirection to Untrusted Site ('Open Redirect') in Products.PluggableAuthService
High
CVE-2021-21336
Exposure of Sensitive Information to an Unauthorized Actor in Products.PluggableAuthService ZODBRoleManager
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.