Vulnerability DB

Detailed information and remediation guidance for known vulnerabilities.
Find out if you have vulnerabilities that put you at risk Test your code
Show:
Report a new vulnerability
Vulnerability Affects Type Published
  • H
HTTP Request Smuggling 		twisted [,20.3.0) pip 01 Apr, 2020
  • H
HTTP Request Splitting 		twisted [,20.3.0) pip 01 Apr, 2020
  • M
Prototype Pollution 		sds * npm 01 Apr, 2020
  • L
Command Injection 		npm-programmatic * npm 01 Apr, 2020
  • M
Prototype Pollution 		ini-parser * npm 01 Apr, 2020
  • M
Command Injection 		git-revision-webpack-plugin * npm 01 Apr, 2020
  • L
Command Injection 		fsa * npm 01 Apr, 2020
  • L
Prototype Pollution 		express-mock-middleware * npm 01 Apr, 2020
  • L
Command Injection 		clamscan * npm 01 Apr, 2020
  • M
Denial of Service (DoS) 		k8s.io/kubernetes/pkg/kubelet/server >=1.15.0 <1.15.10,>=1.16.0 <1.16.6,>=1.17.0 <1.17.2 Go 31 Mar, 2020
  • M
Denial of Service (DoS) 		github.com/kubernetes/kubernetes/pkg/kubelet/server >=1.15.0 <1.15.10,>=1.16.0 <1.16.6,>=1.17.0 <1.17.2 Go 31 Mar, 2020
  • H
Regular Expression Denial of Service (ReDoS) 		bleach [,3.1.4) pip 31 Mar, 2020
  • M
Timing Attack 		jsrsasign <8.0.13 npm 31 Mar, 2020
  • M
Timing Attack 		org.webjars.npm:jsrsasign [0,] Maven 31 Mar, 2020
  • M
Timing Attack 		org.webjars.bowergithub.kjur:jsrsasign [0,] Maven 31 Mar, 2020
  • M
Timing Attack 		org.webjars.bower:jsrsasign [0,] Maven 31 Mar, 2020
  • L
Denial of Service 		symfony/symfony >=4.4.0, <4.4.7,>=5.0.0, <5.0.7 Composer 31 Mar, 2020
  • L
Denial of Service 		symfony/http-foundation >=4.4.0, <4.4.7,>=5.0.0, <5.0.7 Composer 31 Mar, 2020
  • M
Information Exposure 		symfony/symfony >=4.4.0, <4.4.4,>=5.0.0, <5.0.4 Composer 31 Mar, 2020
  • M
Information Exposure 		symfony/error-handler >=4.4.0, <4.4.4,>=5.0.0, <5.0.4 Composer 31 Mar, 2020
  • H
Deserialization of Untrusted Data 		com.fasterxml.jackson.core:jackson-databind [,2.10.0) Maven 31 Mar, 2020
  • H
Deserialization of Untrusted Data 		com.fasterxml.jackson.core:jackson-databind [,2.10.0) Maven 31 Mar, 2020
  • H
Deserialization of Untrusted Data 		com.fasterxml.jackson.core:jackson-databind [,2.10.0) Maven 31 Mar, 2020
  • M
Path Traversal 		next <9.3.2 npm 30 Mar, 2020
  • M
Improper Authorization 		com.yahoo.elide:elide-core [,4.5.14) Maven 30 Mar, 2020
  • H
Improper Authorization 		symfony/symfony >=4.4.0, <4.4.7,>=5.0.0, <5.0.7 Composer 30 Mar, 2020
  • H
Improper Authorization 		symfony/security-http >=4.4.0, <4.4.7,>=5.0.0, <5.0.7 Composer 30 Mar, 2020
  • H
Improper Authorization 		symfony/security >=4.4.0, <4.4.7,>=5.0.0, <5.0.7 Composer 30 Mar, 2020
  • H
Regular Expression Denial of Service (ReDoS) 		mocha <6.0.0 npm 29 Mar, 2020
  • H
Regular Expression Denial of Service (ReDoS) 		org.webjars:mocha [0,] Maven 29 Mar, 2020