Critical
CVE-2016-6903
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,801
Reset filters
Critical
CVE-2016-6902
lshell 0.9.16 allows remote authenticated users to break out of a limited shell and execute arbitrary commands.
Medium
CVE-2017-7234
Django open redirect
Medium
CVE-2017-7233
Django open redirect and possible XSS attack via user-supplied numeric redirect URLs
High
CVE-2016-9243
Improper input validation in cryptography
High
CVE-2016-10149
Pysaml2 does not sanitize XML responses
Medium
CVE-2017-5524
Plone Sandbox Escape
High
CVE-2017-7235
cfscrape Improper Input Validation vulnerability
Medium
CVE-2017-6591
django-epiceditor vulnerable to XSS in form field
Critical
CVE-2016-10127
PySAML2 XML external entity attack
Medium
CVE-2016-9910
Cross-site Scripting in html5lib
Medium
CVE-2016-9909
Improper Neutralization of Input During Web Page Generation in html5lib
Medium
CVE-2017-5992
Improper Restriction of XML External Entity Reference in Openpyxl
Critical
CVE-2013-7459
Buffer Overflow in pycrypto
Medium
CVE-2017-5591
An incorrect implementation of "XEP-0280: Message Carbons" in multiple XMPP clients allows a remote attacker to impersonate any user, including contacts, in the vulnerable application's display. This
High
CVE-2016-10075
TDQM Arbitrary Code Execution
High
CVE-2016-6581
HPACK Denial of Service vulnerability (HPACK Bomb)
High
CVE-2016-5851
Improper Restriction of XML External Entity Reference in python-docx
High
CVE-2016-9964
bottle.py vulnerable to CRLF Injection
High
CVE-2016-9190
Arbitrary code using "crafted image file" approach affecting Pillow
Medium
CVE-2016-9189
Pillow Integer overflow in Map.c
Medium
CVE-2016-1241
Tryton 3.x before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allow remote authenticated users to discover user password hashes via unspecified vectors.
Medium
CVE-2016-1242
file_open in Tryton before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allows remote authenticated users with certain permissions to read arbitrary files
Medium
CVE-2016-4911
OpenStack Identity Keystone Improper Access Control
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.