Tagged “osv”
CVEs tagged osv, newest first.
7203 CVEsRSS
CVE-2020-4071Low· 2.2Timing attack on django-basic-auth-ip-whitelist
Timing attack on django-basic-auth-ip-whitelist
CVE-2020-14040High· 7.5golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash (CVE-2020-14040)
A denial of service vulnerability was found in the golang.org/x/text library. A library or application must use one of the vulnerable functions, such as unicode.Transform, transform.String, or transform.Byte, to be susceptible to this vuln…
CVE-2020-11090High· 7.5Uncontrolled Resource Consumption in Indy Node
Uncontrolled Resource Consumption in Indy Node
CVE-2020-9402High· 8.8SQL injection in Django
SQL injection in Django
CVE-2020-11078Medium· 6.8CRLF injection in httplib2
CRLF injection in httplib2
CVE-2020-11054Low· 3.5Incorrect Provision of Specified Functionality in qutebrowser
Incorrect Provision of Specified Functionality in qutebrowser
CVE-2020-11037Medium· 6.1Potential Observable Timing Discrepancy in Wagtail
Potential Observable Timing Discrepancy in Wagtail
CVE-2020-11010Medium· 6.3SQL injection in Tortoise ORM
SQL injection in Tortoise ORM
CVE-2020-11001Medium· 5.8Possible XSS attack in Wagtail
Possible XSS attack in Wagtail
CVE-2020-6817High· 7.5regular expression denial-of-service (ReDoS) in Bleach
regular expression denial-of-service (ReDoS) in Bleach
CVE-2020-6816Medium· 6.1Bleach vulnerable to mutation XSS via whitelisted math or svg and raw tag
Bleach vulnerable to mutation XSS via whitelisted math or svg and raw tag
CVE-2020-5252Medium· 5.0Malicious package may avoid detection in python auditing
Malicious package may avoid detection in python auditing
CVE-2020-5262High· 7.7GitHub personal access token leaking into temporary EasyBuild (debug) logs
GitHub personal access token leaking into temporary EasyBuild (debug) logs
CVE-2020-10571Critical· 9.8Potential buffer overflow in psd-tools
Potential buffer overflow in psd-tools
CVE-2020-5240High· 7.62FA bypass through deleting devices in wagtail-2fa
2FA bypass through deleting devices in wagtail-2fa
CVE-2020-6802Medium· 6.1XSS in Bleach when noscript and raw tag whitelisted
XSS in Bleach when noscript and raw tag whitelisted
CVE-2020-5236Medium· 5.7PoCCatastrophic backtracking in regex allows Denial of Service in Waitress
Catastrophic backtracking in regex allows Denial of Service in Waitress
CVE-2020-5215Medium· 5.0Segmentation faultin TensorFlow when converting a Python string to `tf.float16`
Segmentation faultin TensorFlow when converting a Python string to `tf.float16`
CVE-2020-5227Medium· 4.4Feedgen Vulnerable to XML Denial of Service Attacks
Feedgen Vulnerable to XML Denial of Service Attacks
CVE-2020-5224Medium· 6.5Session key exposure through session list in Django User Sessions
Session key exposure through session list in Django User Sessions
CVE-2019-16784High· 7.0PoCLocal Privilege Escalation in PyInstaller
Local Privilege Escalation in PyInstaller
CVE-2020-35858Critical· 9.8Parsing a specially crafted message can result in a stack overflow
Parsing a specially crafted message can result in a stack overflow
CVE-2019-16785High· 7.1HTTP Request Smuggling: LF vs CRLF handling in Waitress
HTTP Request Smuggling: LF vs CRLF handling in Waitress
CVE-2019-16786High· 7.1HTTP Request Smuggling: Invalid Transfer-Encoding in Waitress
HTTP Request Smuggling: Invalid Transfer-Encoding in Waitress
CVE-2019-16792CriticalHTTP Request Smuggling: Content-Length Sent Twice in Waitress
HTTP Request Smuggling: Content-Length Sent Twice in Waitress
CVE-2019-16778Low· 2.6Heap buffer overflow in `UnsortedSegmentSum` in TensorFlow
Heap buffer overflow in `UnsortedSegmentSum` in TensorFlow
CVE-2019-16766High· 8.72FA bypass in Wagtail through new device path
2FA bypass in Wagtail through new device path
CVE-2019-12417Medium· 4.8Apache Airflow vulnerable to XSS and local file disclosure
Apache Airflow vulnerable to XSS and local file disclosure
CVE-2017-18638High· 7.5PoCgraphite.composer.views.send_email vulnerable to SSRF
graphite.composer.views.send_email vulnerable to SSRF
CVE-2019-10751High· 8.8Open Redirect in httpie
Open Redirect in httpie