Medium
CVE-2021-21274
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,329
Reset filters
Medium
CVE-2021-21273
Open redirects on some federation and push requests
Low
CVE-2021-21330
`aiohttp` Open Redirect vulnerability (`normalize_path_middleware` middleware)
High
CVE-2020-35681
Django Channels leakage of session identifiers using legacy AsgiHandler
Medium
CVE-2021-26697
Improper Authentication in Apache Airflow
High
CVE-2021-26559
Improper Access Control in Apache Airflow
High
CVE-2021-21240
Regular Expression Denial of Service (REDoS) in httplib2
High
CVE-2020-36242
PyCA Cryptography symmetrically encrypting large values can lead to integer overflow
Medium
CVE-2021-23980
Cross-site scripting in Bleach
Medium
CVE-2020-28493
Regular Expression Denial of Service (ReDoS) in Jinja2
Medium
CVE-2021-21239
Improper Verification of Cryptographic Signature in PySAML2
Medium
CVE-2021-21238
SAML XML Signature wrapping in PySAML2
High
CVE-2020-35654
Pillow Out-of-bounds Write
High
CVE-2021-21236
Regular Expression Denial of Service in CairoSVG
High
CVE-2020-11093
Hyperledger Indy's update process of a DID does not check who signs the request
Medium
CVE-2020-26275
The Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) for Jupyter web applications like Jupyter notebook, JupyterLab, and Voila. In Jupyter Server before version 1
High
CVE-2020-17526
Incorrect Session Validation in Apache Airflow
High
CVE-2020-26263
RSA weakness in tslite-ng
Medium
CVE-2020-17513
SSRF vulnerability in Apache Airflow
Low
CVE-2020-17511
Apache Airflow logs passwords in plaintext
Medium
CVE-2020-17515
Apache Airflow cross-site scripting due to incomplete fix for CVE-2020-13944
Medium
CVE-2020-26270
CHECK-fail in LSTM with zero-length input in TensorFlow
High
CVE-2020-26269
TensorFlow vulnerable to heap out of bounds read in filesystem glob matching
Medium
CVE-2020-26268
Write to immutable memory region in TensorFlow
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.