High
ghsa-67cx-rhhq-mfhq
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,993
Reset filters
Unrated
CVE-2019-12105
** DISPUTED ** In Supervisor through 4.0.2, an unauthenticated user can read log files or restart a service. Note: The maintainer responded that the affected component, inet_http_server, is not enable
High
CVE-2019-10751
Open Redirect in httpie
Medium
CVE-2019-1020006
Invenio-App vulnerable to host header injection attack
High
CVE-2019-13611
python-engineio vulnerable to Cross-Site Request Forgery (CSRF)
Medium
CVE-2019-13114
http.c in Exiv2 through 0.27.1 allows a malicious http server to cause a denial of service (crash due to a NULL pointer dereference) by returning a crafted response that lacks a space character.
High
CVE-2015-1326
Improper Input Validation in python-dbusmock
High
CVE-2019-0229
Apache Airflow vulnerable to CSRF Attacks
High
CVE-2018-12680
CoAPthon DoS due to Exceptions
High
CVE-2018-12679
CoAPthon3 vulnerable to Deserialization of Untrusted Data
Medium
CVE-2019-10255
Open Redirect vulnerability in jupyterhub and notebook
Critical
CVE-2019-5729
splunk-sdk does not properly verify untrusted TLS server certificates
Medium
CVE-2019-6802
CRLF Injection in pypiserver
High
CVE-2018-20245
Improper Certificate Validation in Apache Airflow
High
CVE-2017-15720
Improper Input Validation in Apache Airflow resulting in Remote Code Execution
High
CVE-2018-1000872
PyKMIP Denial of service vulnerability
High
CVE-2018-1000843
Cross-Site Request Forgery (CSRF) in Luigi
Medium
CVE-2018-19351
Jupyter Notebook XSS via untrusted notebooks
High
CVE-2018-1000805
Paramiko Authentication Bypass vulnerability
High
CVE-2018-1000518
websockets is vulnerable to denial of service by memory exhaustion
Critical
CVE-2016-9587
Ansible is vulnerable to an improper input validation in Ansible's handling of data sent from client systems
High
CVE-2018-1000164
Gunicorn contains Improper Neutralization of CRLF sequences in HTTP headers
Critical
CVE-2018-7750
Paramiko not properly checking authentication before processing other requests
Unrated
CVE-2018-1000083
Ajenti version version 2 contains a Improper Error Handling vulnerability in Login JSON request that can result in The requisition leaks a path of the server. This attack appear to be exploitable via
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.