Medium
CVE-2020-26275
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,003
Reset filters
High
CVE-2020-17526
Incorrect Session Validation in Apache Airflow
High
CVE-2020-26263
RSA weakness in tslite-ng
High
CVE-2020-26257
Denial of service attack via incorrect parameters in Matrix Synapse
High
CVE-2020-26261
user-readable api tokens in systemd units for JupyterHub
Medium
CVE-2020-26249
Remote Code Execution (RCE) Exploit on Cross Site Scripting (XSS) Vulnerability
Critical
ghsa-mjcr-rqjg-rhg3
Implementation trusts the "me" field returned by the authorization server without verifying it
Medium
CVE-2020-26232
Open redirect in Jupyter Server
Low
CVE-2020-26215
Open redirect in Jupyter Notebook
Medium
CVE-2020-15275
malicious SVG attachment causing stored XSS vulnerability
Critical
CVE-2020-26214
LDAP authentication bypass with empty password
Medium
CVE-2020-15278
Unauthorized privilege escalation in Mod module
Medium
CVE-2020-26891
Cross-site scripting (XSS) vulnerability in the fallback authentication endpoint
Critical
CVE-2020-27197
libtaxii Server-Side Request Forgery vulnerability
Low
CVE-2020-15239
Directory Traversal vulnerability in GET/PUT allows attackers to Disclose Information or Write Files via a crafted GET/PUT request
High
CVE-2020-15210
Segmentation fault in tensorflow-lite
Medium
CVE-2020-15205
Data leak in Tensorflow
Medium
CVE-2020-15163
Invalid root may become trusted root in The Update Framework (TUF)
High
CVE-2020-15147
Remote Code Execution in Red Discord Bot
Medium
CVE-2020-15140
Remote Code Execution in Red Discord Bot
Critical
CVE-2020-17446
Asyncpg Arbitrary Code Execution Via Access to an Uninitialized Pointer
Medium
CVE-2020-15120
Authorization Bypass in I hate money
High
CVE-2020-15110
Possible pod name collisions in jupyterhub-kubespawner
Medium
CVE-2020-15105
User passwords are stored in clear text in the Django session
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.