Medium
CVE-2017-5591
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,787
Reset filters
High
CVE-2016-10075
TDQM Arbitrary Code Execution
High
CVE-2016-6581
HPACK Denial of Service vulnerability (HPACK Bomb)
High
CVE-2016-5851
Improper Restriction of XML External Entity Reference in python-docx
High
CVE-2016-9964
bottle.py vulnerable to CRLF Injection
High
CVE-2016-9190
Arbitrary code using "crafted image file" approach affecting Pillow
Medium
CVE-2016-9189
Pillow Integer overflow in Map.c
Medium
CVE-2016-1241
Tryton 3.x before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allow remote authenticated users to discover user password hashes via unspecified vectors.
Medium
CVE-2016-1242
file_open in Tryton before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allows remote authenticated users with certain permissions to read arbitrary files
Medium
CVE-2016-4911
OpenStack Identity Keystone Improper Access Control
High
CVE-2016-3096
Link Following in ansible
High
CVE-2016-2533
Pillow buffer overflow in ImagingPcdDecode
Critical
CVE-2016-4009
Pillow Integer overflow in ImagingResampleHorizontal
High
CVE-2016-0775
Pillow Buffer overflow in ImagingFliDecode
Medium
CVE-2016-0740
Pillow Buffer overflow in ImagingLibTiffDecode
Critical
CVE-2015-8557
Command Injection in Pygments
Critical
CVE-2015-7337
Improper Input Validation in Jupyter Notebook
Medium
CVE-2015-6938
Improper Neutralization of Input During Web Page Generation in Jupyter Notebook
Medium
CVE-2015-3219
OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability
High
CVE-2015-5163
OpenStack Image Service (Glance) allows remote authenticated users to read arbitrary file
High
CVE-2015-3908
Ansible does not verify that the server hostname matches a domain name in certificates
High
CVE-2015-5143
Django Denial-of-service by filling session store
High
CVE-2015-1852
The s3_token middleware in OpenStack keystonemiddleware before 1.6.0 and python-keystoneclient before 1.4.0 disables certification verification when the "insecure" option is set in a paste configurati
High
CVE-2015-0260
RhodeCode before 2.2.7 and Kallithea 0.1 allows remote authenticated users to obtain API keys and other sensitive information via the get_repo API method.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.