Critical
CVE-2020-10799
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,801
Reset filters
Critical
CVE-2020-5262
GitHub personal access token leaking into temporary EasyBuild (debug) logs
High
CVE-2019-10682
django-nopassword stores secrets in cleartext
Medium
CVE-2020-1740
Exposure of Sensitive Information to an Unauthorized Actor and Insecure Temporary File in Ansible
Low
CVE-2020-1738
Argument Injection in Ansible
Medium
CVE-2020-1736
Incorrect Permission Assignment for Critical Resource in Ansible
Medium
CVE-2020-1735
Path Traversal in Ansible
Medium
CVE-2020-1753
Insertion of Sensitive Information into Log File, Invocation of Process Using Visible Sensitive Information, and Exposure of Sensitive Information to an Unauthorized Actor in Ansible
Critical
CVE-2020-10594
Django Rest Framework jwt allows obtaining new token from notionally invalidated token
Critical
CVE-2020-10571
Potential buffer overflow in psd-tools
Medium
CVE-2020-5240
2FA bypass through deleting devices in wagtail-2fa
Low
CVE-2020-1739
Exposure of Sensitive Information to an Unauthorized Actor in Ansible
Critical
CVE-2020-10109
HTTP Request Smuggling in Twisted
Critical
CVE-2020-10108
Improper Input Validation in Twisted
Medium
CVE-2016-1000111
Forced Browsing in Twisted
Low
CVE-2020-1733
Ansible vulnerable to Exposure of Resource to Wrong Sphere and Insecure Temporary File
High
CVE-2020-1737
Path Traversal in Ansible
High
CVE-2020-7212
Uncontrolled Resource Consumption in urllib3
High
CVE-2020-9402
Django 1.11 before 1.11.29, 2.2 before 2.2.11, and 3.0 before 3.0.4 allows SQL Injection if untrusted data is used as a tolerance parameter in GIS functions and aggregates on Oracle. By passing a suit
High
CVE-2020-1734
OS Command Injection in ansible
Medium
CVE-2020-1932
An information disclosure issue was found in Apache Superset 0.34.0, 0.34.1, 0.35.0, and 0.35.1. Authenticated Apache Superset users are able to retrieve other users' information, including hashed pas
Critical
CVE-2019-20477
Deserialization of Untrusted Data in PyYAML
Critical
CVE-2020-6174
Incorrect threshold signature computation in TUF
Medium
CVE-2020-5236
Catastrophic backtracking in regex allows Denial of Service in Waitress
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.