Medium
CVE-2020-10691
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,334
Reset filters
Medium
CVE-2020-11010
SQL injection in Tortoise ORM
Medium
CVE-2020-6802
XSS in Bleach when noscript and raw tag whitelisted
Medium
CVE-2020-5252
Malicious package may avoid detection in python auditing
Medium
CVE-2020-5240
2FA bypass through deleting devices in wagtail-2fa
Low
CVE-2020-1733
Ansible vulnerable to Exposure of Resource to Wrong Sphere and Insecure Temporary File
High
CVE-2019-16784
Local Privilege Escalation in PyInstaller
Medium
CVE-2019-16785
HTTP Request Smuggling: LF vs CRLF handling in Waitress
Unrated
CVE-2019-12105
** DISPUTED ** In Supervisor through 4.0.2, an unauthenticated user can read log files or restart a service. Note: The maintainer responded that the affected component, inet_http_server, is not enable
Critical
CVE-2019-13177
Improper Verification of Cryptographic Signature in django-rest-registration
High
CVE-2017-14158
Scrapy denial of service vulnerability
Medium
CVE-2017-7233
Django open redirect and possible XSS attack via user-supplied numeric redirect URLs
High
CVE-2016-6581
HPACK Denial of Service vulnerability (HPACK Bomb)
High
CVE-2014-1402
Incorrect Privilege Assignment in Jinja2
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.