High
CVE-2018-1000814
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,309
Reset filters
High
CVE-2018-19443
Session Fixation in Tryton
Medium
CVE-2018-19352
Jupyter Notebook XSS via directory name
High
CVE-2018-18920
Py-EVM is vulnerable to arbitrary bytecode injection
High
CVE-2018-1000809
privacyIDEA Improper Input Validation vulnerability
High
CVE-2018-1000807
PyOpenSSL Use-After-Free vulnerability
High
CVE-2018-1000805
Paramiko Authentication Bypass vulnerability
High
CVE-2018-1000523
topydo contains a CWE-20: Improper Input Validation vulnerability in ListFormatParser::parse, file topydo/lib/ListFormat.py line 292 as of d4f843dac71308b2f29a7c2cdc76f055c3841523 that can result in I
High
CVE-2018-14572
conference-scheduler-cli Arbitrary Code Execution
High
CVE-2018-1000656
Flask is vulnerable to Denial of Service via incorrect encoding of JSON data
Critical
CVE-2016-8628
Ansible fails to properly sanitize fact variables sent from the Ansible controller
Medium
CVE-2016-8647
Improper Input Validation in ansible
Critical
CVE-2017-7481
Ansible fails to properly mark lookup-plugin results as unsafe
High
CVE-2018-10855
Ansible exposes sensitive data in log files and on the terminal
Critical
CVE-2017-18342
PyYAML insecurely deserializes YAML strings leading to arbitrary code execution
Medium
CVE-2018-1000559
Qutebrowser XSS Vulnerability
High
CVE-2018-1000519
aiohttp-session Session Fixation vulnerability
High
CVE-2018-1000518
websockets is vulnerable to denial of service by memory exhaustion
High
CVE-2017-2592
oslo.middleware Information Disclosure vulnerability
Critical
CVE-2013-2233
Ansible fails to cache SSH host keys
High
CVE-2018-1000164
Gunicorn contains Improper Neutralization of CRLF sequences in HTTP headers
High
CVE-2018-1000159
tlslite-ng off-by-one error on mac checking
High
CVE-2018-0023
JSNAPy allows unprivileged local users to alter files under the directory
Critical
CVE-2018-1002150
Koji hub call does not perform correct access checks
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.