Medium
CVE-2019-16789
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,801
Reset filters
High
ghsa-m5ff-3wj3-8ph4
HTTP Request Smuggling: Invalid whitespace characters in headers in Waitress
Medium
CVE-2019-16786
HTTP Request Smuggling: Invalid Transfer-Encoding in Waitress
Medium
CVE-2019-16785
HTTP Request Smuggling: LF vs CRLF handling in Waitress
Critical
CVE-2019-19844
Django Potential account hijack via password reset form
Medium
CVE-2019-12414
Users can view database names in Apache Superset
Medium
CVE-2019-12413
Users able to query database metadata in Apache Superset
Low
CVE-2019-16778
Heap buffer overflow in `UnsortedSegmentSum` in TensorFlow
Critical
CVE-2014-8650
Improper Authentication in requests-kerberos
Critical
CVE-2013-2167
Insufficient Verification of Data Authenticity in python-keystoneclient
Critical
CVE-2013-2166
Inadequate Encryption Strength in python-keystoneclient
High
CVE-2019-19588
Uncontrolled resource consumption in validators Python package
High
CVE-2019-19118
Django allows unintended model editing
Medium
CVE-2019-16766
2FA bypass in Wagtail through new device path
Medium
CVE-2019-10195
A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way that FreeIPA's batch processing API logged operations. This in
High
CVE-2019-19275
typed-ast Out-of-bounds Read
High
CVE-2019-19274
typed-ast Out-of-bounds Read
High
CVE-2019-10217
Exposure of Sensitive Information to an Unauthorized Actor in ansible
High
CVE-2012-5578
Incorrect Default Permissions in keyring
Medium
CVE-2015-5694
Designate does not enforce the DNS protocol limit concerning record set sizes
Medium
CVE-2019-12417
Apache Airflow vulnerable to XSS and local file disclosure
Medium
CVE-2014-1938
Link Following in rply
Critical
CVE-2019-19010
Eval injection in Supybot/Limnoria
High
CVE-2014-7143
Python Twisted trustRoot is not respected in HTTP client
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.