High
CVE-2015-5159
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,787
Reset filters
Medium
CVE-2017-5934
Moderate severity vulnerability that affects moin
High
CVE-2018-18074
Insufficiently Protected Credentials in Requests
High
CVE-2018-1000809
privacyIDEA Improper Input Validation vulnerability
High
CVE-2018-1000808
Pyopenssl Incorrect Memory Management
High
CVE-2018-1000807
PyOpenSSL Use-After-Free vulnerability
High
CVE-2018-1000805
Paramiko Authentication Bypass vulnerability
Medium
CVE-2018-16984
Django allows unprivileged users to read the password hashes of arbitrary accounts
Medium
CVE-2018-17175
In marshmallow library the schema "only" option treats an empty list as implying no "only" option
High
CVE-2018-1000523
topydo contains a CWE-20: Improper Input Validation vulnerability in ListFormatParser::parse, file topydo/lib/ListFormat.py line 292 as of d4f843dac71308b2f29a7c2cdc76f055c3841523 that can result in I
Medium
CVE-2018-16516
Flask-Admin Cross-site Scripting vulnerability
Medium
CVE-2018-16407
Moderate severity vulnerability that affects mayan-edms
Medium
CVE-2018-16406
Moderate severity vulnerability that affects mayan-edms
Medium
CVE-2018-16405
An issue was discovered in Mayan EDMS before 3.0.2. The Appearance app sets window.location directly, leading to XSS.
High
CVE-2018-14572
conference-scheduler-cli Arbitrary Code Execution
High
CVE-2018-1000656
Flask is vulnerable to Denial of Service via incorrect encoding of JSON data
High
CVE-2011-2765
Pyro mishandles pid files in temporary directory locations and opening the pid file as root
High
CVE-2018-15560
PyCryptodome integer overflow vulnerability
Medium
CVE-2018-14574
Django open redirect
Critical
CVE-2016-8640
SQL Injection in pycsw
High
CVE-2016-8614
Ansible apt_key module does not properly verify key fingerprint
Critical
CVE-2016-8628
Ansible fails to properly sanitize fact variables sent from the Ansible controller
Unrated
CVE-2018-10898
A vulnerability was found in openstack-tripleo-heat-templates before version 8.0.2-40. When deployed using Director using default configuration, Opendaylight in RHOSP13 is configured with easily guess
High
CVE-2018-10903
PyCA Cryptography vulnerable to GCM tag forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.