Tagged “osv”
CVEs tagged osv, newest first.
7207 CVEsRSS
CVE-2019-16766High· 8.72FA bypass in Wagtail through new device path
2FA bypass in Wagtail through new device path
CVE-2019-12417Medium· 4.8Apache Airflow vulnerable to XSS and local file disclosure
Apache Airflow vulnerable to XSS and local file disclosure
CVE-2017-18638High· 7.5PoCgraphite.composer.views.send_email vulnerable to SSRF
graphite.composer.views.send_email vulnerable to SSRF
CVE-2019-10751High· 8.8Open Redirect in httpie
Open Redirect in httpie
CVE-2019-15554Critical· 9.8Memory corruption in SmallVec::grow()
Memory corruption in SmallVec::grow()
CVE-2019-1020003Medium· 5.4Cross-site scripting invenio-records
Cross-site scripting invenio-records
CVE-2019-1020005Medium· 5.4Cross-site Scripting in invenio-communities
Cross-site Scripting in invenio-communities
CVE-2019-1020019Medium· 6.1Cross-site Scripting in invenio-previewer
Cross-site Scripting in invenio-previewer
CVE-2019-1020006Medium· 6.1Invenio-App vulnerable to host header injection attack
Invenio-App vulnerable to host header injection attack
CVE-2019-16791Medium· 6.9postfix-mta-sts-resolver Algorithm Downgrade vulnerability
postfix-mta-sts-resolver Algorithm Downgrade vulnerability
CVE-2019-13177Critical· 9.8Improper Verification of Cryptographic Signature in django-rest-registration
Improper Verification of Cryptographic Signature in django-rest-registration
CVE-2019-15551Critical· 9.8Double-free and use-after-free in SmallVec::grow()
Double-free and use-after-free in SmallVec::grow()
CVE-2019-11358Medium· 6.1⚠ ExploitedPoCXSS in jQuery as used in Drupal, Backdrop CMS, and other products
XSS in jQuery as used in Drupal, Backdrop CMS, and other products
CVE-2019-10255Medium· 6.1Open Redirect vulnerability in jupyterhub and notebook
Open Redirect vulnerability in jupyterhub and notebook
CVE-2018-25001Medium· 6.5Possible use-after-free with `proplist::Iterator`
Possible use-after-free with `proplist::Iterator`
CVE-2018-20998Critical· 9.8Enum repr causing potential memory corruption
Enum repr causing potential memory corruption
CVE-2018-20996Critical· 9.8MsQueue and SegQueue suffer from double-free
MsQueue and SegQueue suffer from double-free
CVE-2018-13796Medium· 6.5Moderate severity vulnerability that affects mailman
Moderate severity vulnerability that affects mailman
CVE-2011-1948Medium· 6.1Cross-site scripting in Products.CMFPlone and Products.PasswordResetTool
Cross-site scripting in Products.CMFPlone and Products.PasswordResetTool
CVE-2011-1950Medium· 6.5⚠ ExploitedPlone and plone.app.users allow remote authenticated users to modify the properties of arbitrary accounts
Plone and plone.app.users allow remote authenticated users to modify the properties of arbitrary accounts
CVE-2010-1104MediumModerate severity vulnerability that affects Zope2
Moderate severity vulnerability that affects Zope2
CVE-2009-0662MediumModerate severity vulnerability that affects Products.PlonePAS
Moderate severity vulnerability that affects Products.PlonePAS
CVE-2011-2528HighHigh severity vulnerability that affects Plone and Zope2
High severity vulnerability that affects Plone and Zope2
CVE-2018-20991Critical· 9.8Possible double free during unwinding in SmallVec::insert_many
Possible double free during unwinding in SmallVec::insert_many
CVE-2017-2673High· 7.2An authorization-check flaw was discovered in federation configurations of the OpenStack Identity service (keystone). An authenticated fe…
An authorization-check flaw was discovered in federation configurations of the OpenStack Identity service (keystone). An authenticated federated user could request permissions to a project and unintentionally be granted all related roles…
CVE-2018-1000164High· 7.5Gunicorn contains Improper Neutralization of CRLF sequences in HTTP headers
Gunicorn contains Improper Neutralization of CRLF sequences in HTTP headers
CVE-2018-1000516Medium· 6.1The Galaxy Project Galaxy version v14.10 contains a CWE-79: Improper Neutralization of Input During Web Page Generation vulnerability in …
The Galaxy Project Galaxy version v14.10 contains a CWE-79: Improper Neutralization of Input During Web Page Generation vulnerability in Many templates used in the Galaxy server did not properly sanitize user's input, which would allow f…
CVE-2018-25027NoneUse-after-free with objects returned by `Stream`'s `get_format_info` and `get_context` methods
Use-after-free with objects returned by `Stream`'s `get_format_info` and `get_context` methods
CVE-2016-6903Critical· 9.9lshell 0.9.16 allows remote authenticated users to break out of a limited shell and execute arbitrary commands.
lshell 0.9.16 allows remote authenticated users to break out of a limited shell and execute arbitrary commands.
CVE-2016-6902Critical· 9.9lshell 0.9.16 allows remote authenticated users to break out of a limited shell and execute arbitrary commands.
lshell 0.9.16 allows remote authenticated users to break out of a limited shell and execute arbitrary commands.