High
CVE-2016-3096
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,801
Reset filters
High
CVE-2016-2533
Pillow buffer overflow in ImagingPcdDecode
Critical
CVE-2016-4009
Pillow Integer overflow in ImagingResampleHorizontal
High
CVE-2016-0775
Pillow Buffer overflow in ImagingFliDecode
Medium
CVE-2016-0740
Pillow Buffer overflow in ImagingLibTiffDecode
Critical
CVE-2015-8557
Command Injection in Pygments
Critical
CVE-2015-7337
Improper Input Validation in Jupyter Notebook
Medium
CVE-2015-6938
Improper Neutralization of Input During Web Page Generation in Jupyter Notebook
Medium
CVE-2015-3219
OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability
High
CVE-2015-5163
OpenStack Image Service (Glance) allows remote authenticated users to read arbitrary file
High
CVE-2015-3908
Ansible does not verify that the server hostname matches a domain name in certificates
High
CVE-2015-5143
Django Denial-of-service by filling session store
High
CVE-2015-1852
The s3_token middleware in OpenStack keystonemiddleware before 1.6.0 and python-keystoneclient before 1.4.0 disables certification verification when the "insecure" option is set in a paste configurati
High
CVE-2015-0260
RhodeCode before 2.2.7 and Kallithea 0.1 allows remote authenticated users to obtain API keys and other sensitive information via the get_repo API method.
Unrated
CVE-2015-1613
RhodeCode before 2.2.7 allows remote authenticated users to obtain API keys and other sensitive information via the (1) update_repo, (2) get_locks, or (3) get_user_groups API method.
Unrated
CVE-2014-5277
Docker before 1.3.1 and docker-py before 0.5.3 fall back to HTTP when the HTTPS connection to the registry fails, which allows man-in-the-middle attackers to conduct downgrade attacks and obtain authe
High
CVE-2012-6661
Plone and Zope2 do not reseed pseudo-random number generator
Critical
CVE-2011-4103
Django-piston and Django-tastypie do not properly deserialize YAML data
Critical
CVE-2014-1929
python-gnupg vulnerable to shell injection
High
CVE-2014-1928
python-gnupg's shell_quote function does not properly escape characters
High
CVE-2014-1927
python-gnupg's shell_quote function does not properly quote strings
Medium
CVE-2014-1830
Exposure of Sensitive Information to an Unauthorized Actor in Requests
Medium
CVE-2014-1829
Exposure of Sensitive Information to an Unauthorized Actor in Requests
High
CVE-2014-7144
OpenStack keystonemiddleware (formerly python-keystoneclient) 0.x before 0.11.0 and 1.x before 1.2.0 disables certification verification when the "insecure" option is set in a paste configuration (pas
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.