High
CVE-2020-26261
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,999
Reset filters
Medium
CVE-2020-26249
Remote Code Execution (RCE) Exploit on Cross Site Scripting (XSS) Vulnerability
Critical
ghsa-mjcr-rqjg-rhg3
Implementation trusts the "me" field returned by the authorization server without verifying it
Medium
CVE-2020-26232
Open redirect in Jupyter Server
Low
CVE-2020-26215
Open redirect in Jupyter Notebook
Medium
CVE-2020-15275
malicious SVG attachment causing stored XSS vulnerability
Critical
CVE-2020-26214
LDAP authentication bypass with empty password
Medium
CVE-2020-15278
Unauthorized privilege escalation in Mod module
Medium
CVE-2020-26891
Cross-site scripting (XSS) vulnerability in the fallback authentication endpoint
Critical
CVE-2020-27197
libtaxii Server-Side Request Forgery vulnerability
Low
CVE-2020-15239
Directory Traversal vulnerability in GET/PUT allows attackers to Disclose Information or Write Files via a crafted GET/PUT request
High
CVE-2020-15210
Segmentation fault in tensorflow-lite
Medium
CVE-2020-15205
Data leak in Tensorflow
Medium
CVE-2020-15163
Invalid root may become trusted root in The Update Framework (TUF)
High
CVE-2020-15147
Remote Code Execution in Red Discord Bot
Medium
CVE-2020-15140
Remote Code Execution in Red Discord Bot
Critical
CVE-2020-17446
Asyncpg Arbitrary Code Execution Via Access to an Uninitialized Pointer
Medium
CVE-2020-15120
Authorization Bypass in I hate money
High
CVE-2020-15110
Possible pod name collisions in jupyterhub-kubespawner
Medium
CVE-2020-15105
User passwords are stored in clear text in the Django session
Medium
CVE-2020-4071
Timing attack on django-basic-auth-ip-whitelist
Medium
CVE-2020-11078
CRLF injection in httplib2
Medium
CVE-2016-1000111
Forced Browsing in Twisted
High
ghsa-m5ff-3wj3-8ph4
HTTP Request Smuggling: Invalid whitespace characters in headers in Waitress
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.