Critical
CVE-2019-16792
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,333
Reset filters
High
CVE-2019-16791
postfix-mta-sts-resolver Algorithm Downgrade vulnerability
High
CVE-2019-16784
Local Privilege Escalation in PyInstaller
Medium
CVE-2020-6173
Client Denial of Service on TUF
Medium
CVE-2019-12398
XSS in Apache Airflow
Medium
CVE-2019-16789
HTTP Request Smuggling in Waitress: Invalid whitespace characters in headers (Follow-up)
High
ghsa-m5ff-3wj3-8ph4
HTTP Request Smuggling: Invalid whitespace characters in headers in Waitress
Medium
CVE-2019-16786
HTTP Request Smuggling: Invalid Transfer-Encoding in Waitress
Medium
CVE-2019-16785
HTTP Request Smuggling: LF vs CRLF handling in Waitress
Critical
CVE-2019-19844
Django Potential account hijack via password reset form
High
CVE-2019-19588
Uncontrolled resource consumption in validators Python package
Medium
CVE-2019-16766
2FA bypass in Wagtail through new device path
High
CVE-2019-19275
typed-ast Out-of-bounds Read
High
CVE-2019-19274
typed-ast Out-of-bounds Read
Medium
CVE-2019-12417
Apache Airflow vulnerable to XSS and local file disclosure
High
CVE-2017-18638
graphite.composer.views.send_email vulnerable to SSRF
High
ghsa-67cx-rhhq-mfhq
High severity vulnerability that affects indico
Unrated
CVE-2019-12105
** DISPUTED ** In Supervisor through 4.0.2, an unauthenticated user can read log files or restart a service. Note: The maintainer responded that the affected component, inet_http_server, is not enable
High
CVE-2019-14806
Pallets Werkzeug Insufficient Entropy
High
CVE-2019-10099
Prior to Spark 2.3.3, in certain situations Spark would write user data to local disk unencrypted, even if spark.io.encryption.enabled=true. This includes cached blocks that are fetched to disk (contr
High
CVE-2019-14235
Uncontrolled Recursion in Django
High
CVE-2019-14233
Django Denial-of-service in strip_tags()
High
CVE-2019-14232
Django Denial-of-service in django.utils.text.Truncator
Medium
CVE-2019-1020006
Invenio-App vulnerable to host header injection attack
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.