Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-8kva-hv12-9ydc
SummaryTornado before 3.2.2 sends arbitrary responses that contain a fixed CSRF token and may be sent with HTTP compression, which makes it easier for remote attackers to conduct a BREACH attack and determine this token via a series of crafted requests.
Aliases
0
alias CVE-2014-9720
1
alias GHSA-8vpw-mgpf-mpvv
2
alias PYSEC-2020-213
Fixed_packages
0
url pkg:deb/debian/python-tornado@3.2.2-1?distro=trixie
purl pkg:deb/debian/python-tornado@3.2.2-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-tornado@3.2.2-1%3Fdistro=trixie
1
url pkg:deb/debian/python-tornado@3.2.2-1.1
purl pkg:deb/debian/python-tornado@3.2.2-1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-27x3-ch78-8ueh
1
vulnerability VCID-3y8v-vsd8-ubba
2
vulnerability VCID-62bx-a5uf-j3b4
3
vulnerability VCID-6knn-nt2y-1uem
4
vulnerability VCID-be89-uuxa-fyb5
5
vulnerability VCID-g13r-ansu-27av
6
vulnerability VCID-nq24-395d-wuar
7
vulnerability VCID-y1z8-z2f1-mqg7
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-tornado@3.2.2-1.1
2
url pkg:deb/debian/python-tornado@6.1.0-1?distro=trixie
purl pkg:deb/debian/python-tornado@6.1.0-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-tornado@6.1.0-1%3Fdistro=trixie
3
url pkg:deb/debian/python-tornado@6.2.0-3%2Bdeb12u2?distro=trixie
purl pkg:deb/debian/python-tornado@6.2.0-3%2Bdeb12u2?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-27x3-ch78-8ueh
1
vulnerability VCID-be89-uuxa-fyb5
2
vulnerability VCID-g13r-ansu-27av
3
vulnerability VCID-nq24-395d-wuar
4
vulnerability VCID-y1z8-z2f1-mqg7
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-tornado@6.2.0-3%252Bdeb12u2%3Fdistro=trixie
4
url pkg:deb/debian/python-tornado@6.4.2-3?distro=trixie
purl pkg:deb/debian/python-tornado@6.4.2-3?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-27x3-ch78-8ueh
1
vulnerability VCID-be89-uuxa-fyb5
2
vulnerability VCID-g13r-ansu-27av
3
vulnerability VCID-nq24-395d-wuar
4
vulnerability VCID-y1z8-z2f1-mqg7
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-tornado@6.4.2-3%3Fdistro=trixie
5
url pkg:deb/debian/python-tornado@6.5.4-1?distro=trixie
purl pkg:deb/debian/python-tornado@6.5.4-1?distro=trixie
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-be89-uuxa-fyb5
1
vulnerability VCID-nq24-395d-wuar
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-tornado@6.5.4-1%3Fdistro=trixie
6
url pkg:deb/debian/python-tornado@6.5.5-1?distro=trixie
purl pkg:deb/debian/python-tornado@6.5.5-1?distro=trixie
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-tornado@6.5.5-1%3Fdistro=trixie
7
url pkg:pypi/tornado@3.2.2
purl pkg:pypi/tornado@3.2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3y8v-vsd8-ubba
1
vulnerability VCID-62bx-a5uf-j3b4
2
vulnerability VCID-6knn-nt2y-1uem
3
vulnerability VCID-be89-uuxa-fyb5
4
vulnerability VCID-e25f-6gkj-vfgw
5
vulnerability VCID-jbwv-ayru-8fgm
6
vulnerability VCID-jf6j-dngc-6qdp
7
vulnerability VCID-y14s-8wpj-wygd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@3.2.2
Affected_packages
0
url pkg:deb/debian/python-tornado@1.0.1-1
purl pkg:deb/debian/python-tornado@1.0.1-1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1mw1-384y-huc7
1
vulnerability VCID-27x3-ch78-8ueh
2
vulnerability VCID-3y8v-vsd8-ubba
3
vulnerability VCID-62bx-a5uf-j3b4
4
vulnerability VCID-6knn-nt2y-1uem
5
vulnerability VCID-8kva-hv12-9ydc
6
vulnerability VCID-be89-uuxa-fyb5
7
vulnerability VCID-byy6-ku5b-ykew
8
vulnerability VCID-g13r-ansu-27av
9
vulnerability VCID-nq24-395d-wuar
10
vulnerability VCID-y1z8-z2f1-mqg7
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-tornado@1.0.1-1
1
url pkg:deb/debian/python-tornado@1.0.1-1%2Bdeb6u1
purl pkg:deb/debian/python-tornado@1.0.1-1%2Bdeb6u1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1mw1-384y-huc7
1
vulnerability VCID-27x3-ch78-8ueh
2
vulnerability VCID-3y8v-vsd8-ubba
3
vulnerability VCID-62bx-a5uf-j3b4
4
vulnerability VCID-6knn-nt2y-1uem
5
vulnerability VCID-8kva-hv12-9ydc
6
vulnerability VCID-be89-uuxa-fyb5
7
vulnerability VCID-byy6-ku5b-ykew
8
vulnerability VCID-g13r-ansu-27av
9
vulnerability VCID-nq24-395d-wuar
10
vulnerability VCID-y1z8-z2f1-mqg7
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-tornado@1.0.1-1%252Bdeb6u1
2
url pkg:deb/debian/python-tornado@2.3-2
purl pkg:deb/debian/python-tornado@2.3-2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-1mw1-384y-huc7
1
vulnerability VCID-27x3-ch78-8ueh
2
vulnerability VCID-3y8v-vsd8-ubba
3
vulnerability VCID-62bx-a5uf-j3b4
4
vulnerability VCID-6knn-nt2y-1uem
5
vulnerability VCID-8kva-hv12-9ydc
6
vulnerability VCID-be89-uuxa-fyb5
7
vulnerability VCID-g13r-ansu-27av
8
vulnerability VCID-nq24-395d-wuar
9
vulnerability VCID-y1z8-z2f1-mqg7
resource_url http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-tornado@2.3-2
3
url pkg:pypi/tornado@0.2
purl pkg:pypi/tornado@0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3y8v-vsd8-ubba
1
vulnerability VCID-62bx-a5uf-j3b4
2
vulnerability VCID-6knn-nt2y-1uem
3
vulnerability VCID-8kva-hv12-9ydc
4
vulnerability VCID-be89-uuxa-fyb5
5
vulnerability VCID-byy6-ku5b-ykew
6
vulnerability VCID-e25f-6gkj-vfgw
7
vulnerability VCID-jbwv-ayru-8fgm
8
vulnerability VCID-jf6j-dngc-6qdp
9
vulnerability VCID-y14s-8wpj-wygd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@0.2
4
url pkg:pypi/tornado@1.0
purl pkg:pypi/tornado@1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3y8v-vsd8-ubba
1
vulnerability VCID-62bx-a5uf-j3b4
2
vulnerability VCID-6knn-nt2y-1uem
3
vulnerability VCID-8kva-hv12-9ydc
4
vulnerability VCID-be89-uuxa-fyb5
5
vulnerability VCID-byy6-ku5b-ykew
6
vulnerability VCID-e25f-6gkj-vfgw
7
vulnerability VCID-jbwv-ayru-8fgm
8
vulnerability VCID-jf6j-dngc-6qdp
9
vulnerability VCID-y14s-8wpj-wygd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@1.0
5
url pkg:pypi/tornado@1.1
purl pkg:pypi/tornado@1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3y8v-vsd8-ubba
1
vulnerability VCID-62bx-a5uf-j3b4
2
vulnerability VCID-6knn-nt2y-1uem
3
vulnerability VCID-8kva-hv12-9ydc
4
vulnerability VCID-be89-uuxa-fyb5
5
vulnerability VCID-byy6-ku5b-ykew
6
vulnerability VCID-e25f-6gkj-vfgw
7
vulnerability VCID-jbwv-ayru-8fgm
8
vulnerability VCID-jf6j-dngc-6qdp
9
vulnerability VCID-y14s-8wpj-wygd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@1.1
6
url pkg:pypi/tornado@1.1.1
purl pkg:pypi/tornado@1.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3y8v-vsd8-ubba
1
vulnerability VCID-62bx-a5uf-j3b4
2
vulnerability VCID-6knn-nt2y-1uem
3
vulnerability VCID-8kva-hv12-9ydc
4
vulnerability VCID-be89-uuxa-fyb5
5
vulnerability VCID-byy6-ku5b-ykew
6
vulnerability VCID-e25f-6gkj-vfgw
7
vulnerability VCID-jbwv-ayru-8fgm
8
vulnerability VCID-jf6j-dngc-6qdp
9
vulnerability VCID-y14s-8wpj-wygd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@1.1.1
7
url pkg:pypi/tornado@1.2
purl pkg:pypi/tornado@1.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3y8v-vsd8-ubba
1
vulnerability VCID-62bx-a5uf-j3b4
2
vulnerability VCID-6knn-nt2y-1uem
3
vulnerability VCID-8kva-hv12-9ydc
4
vulnerability VCID-be89-uuxa-fyb5
5
vulnerability VCID-byy6-ku5b-ykew
6
vulnerability VCID-e25f-6gkj-vfgw
7
vulnerability VCID-jbwv-ayru-8fgm
8
vulnerability VCID-jf6j-dngc-6qdp
9
vulnerability VCID-y14s-8wpj-wygd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@1.2
8
url pkg:pypi/tornado@1.2.1
purl pkg:pypi/tornado@1.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3y8v-vsd8-ubba
1
vulnerability VCID-62bx-a5uf-j3b4
2
vulnerability VCID-6knn-nt2y-1uem
3
vulnerability VCID-8kva-hv12-9ydc
4
vulnerability VCID-be89-uuxa-fyb5
5
vulnerability VCID-byy6-ku5b-ykew
6
vulnerability VCID-e25f-6gkj-vfgw
7
vulnerability VCID-jbwv-ayru-8fgm
8
vulnerability VCID-jf6j-dngc-6qdp
9
vulnerability VCID-y14s-8wpj-wygd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@1.2.1
9
url pkg:pypi/tornado@2.0
purl pkg:pypi/tornado@2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3y8v-vsd8-ubba
1
vulnerability VCID-62bx-a5uf-j3b4
2
vulnerability VCID-6knn-nt2y-1uem
3
vulnerability VCID-8kva-hv12-9ydc
4
vulnerability VCID-be89-uuxa-fyb5
5
vulnerability VCID-byy6-ku5b-ykew
6
vulnerability VCID-e25f-6gkj-vfgw
7
vulnerability VCID-jbwv-ayru-8fgm
8
vulnerability VCID-jf6j-dngc-6qdp
9
vulnerability VCID-y14s-8wpj-wygd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@2.0
10
url pkg:pypi/tornado@2.1
purl pkg:pypi/tornado@2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3y8v-vsd8-ubba
1
vulnerability VCID-62bx-a5uf-j3b4
2
vulnerability VCID-6knn-nt2y-1uem
3
vulnerability VCID-8kva-hv12-9ydc
4
vulnerability VCID-be89-uuxa-fyb5
5
vulnerability VCID-byy6-ku5b-ykew
6
vulnerability VCID-e25f-6gkj-vfgw
7
vulnerability VCID-jbwv-ayru-8fgm
8
vulnerability VCID-jf6j-dngc-6qdp
9
vulnerability VCID-y14s-8wpj-wygd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@2.1
11
url pkg:pypi/tornado@2.1.1
purl pkg:pypi/tornado@2.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3y8v-vsd8-ubba
1
vulnerability VCID-62bx-a5uf-j3b4
2
vulnerability VCID-6knn-nt2y-1uem
3
vulnerability VCID-8kva-hv12-9ydc
4
vulnerability VCID-be89-uuxa-fyb5
5
vulnerability VCID-byy6-ku5b-ykew
6
vulnerability VCID-e25f-6gkj-vfgw
7
vulnerability VCID-jbwv-ayru-8fgm
8
vulnerability VCID-jf6j-dngc-6qdp
9
vulnerability VCID-y14s-8wpj-wygd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@2.1.1
12
url pkg:pypi/tornado@2.2
purl pkg:pypi/tornado@2.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3y8v-vsd8-ubba
1
vulnerability VCID-62bx-a5uf-j3b4
2
vulnerability VCID-6knn-nt2y-1uem
3
vulnerability VCID-8kva-hv12-9ydc
4
vulnerability VCID-be89-uuxa-fyb5
5
vulnerability VCID-byy6-ku5b-ykew
6
vulnerability VCID-e25f-6gkj-vfgw
7
vulnerability VCID-jbwv-ayru-8fgm
8
vulnerability VCID-jf6j-dngc-6qdp
9
vulnerability VCID-y14s-8wpj-wygd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@2.2
13
url pkg:pypi/tornado@2.2.1
purl pkg:pypi/tornado@2.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3y8v-vsd8-ubba
1
vulnerability VCID-62bx-a5uf-j3b4
2
vulnerability VCID-6knn-nt2y-1uem
3
vulnerability VCID-8kva-hv12-9ydc
4
vulnerability VCID-be89-uuxa-fyb5
5
vulnerability VCID-e25f-6gkj-vfgw
6
vulnerability VCID-jbwv-ayru-8fgm
7
vulnerability VCID-jf6j-dngc-6qdp
8
vulnerability VCID-y14s-8wpj-wygd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@2.2.1
14
url pkg:pypi/tornado@2.3
purl pkg:pypi/tornado@2.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3y8v-vsd8-ubba
1
vulnerability VCID-62bx-a5uf-j3b4
2
vulnerability VCID-6knn-nt2y-1uem
3
vulnerability VCID-8kva-hv12-9ydc
4
vulnerability VCID-be89-uuxa-fyb5
5
vulnerability VCID-e25f-6gkj-vfgw
6
vulnerability VCID-jbwv-ayru-8fgm
7
vulnerability VCID-jf6j-dngc-6qdp
8
vulnerability VCID-y14s-8wpj-wygd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@2.3
15
url pkg:pypi/tornado@2.4
purl pkg:pypi/tornado@2.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3y8v-vsd8-ubba
1
vulnerability VCID-62bx-a5uf-j3b4
2
vulnerability VCID-6knn-nt2y-1uem
3
vulnerability VCID-8kva-hv12-9ydc
4
vulnerability VCID-be89-uuxa-fyb5
5
vulnerability VCID-e25f-6gkj-vfgw
6
vulnerability VCID-jbwv-ayru-8fgm
7
vulnerability VCID-jf6j-dngc-6qdp
8
vulnerability VCID-y14s-8wpj-wygd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@2.4
16
url pkg:pypi/tornado@2.4.1
purl pkg:pypi/tornado@2.4.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3y8v-vsd8-ubba
1
vulnerability VCID-62bx-a5uf-j3b4
2
vulnerability VCID-6knn-nt2y-1uem
3
vulnerability VCID-8kva-hv12-9ydc
4
vulnerability VCID-be89-uuxa-fyb5
5
vulnerability VCID-e25f-6gkj-vfgw
6
vulnerability VCID-jbwv-ayru-8fgm
7
vulnerability VCID-jf6j-dngc-6qdp
8
vulnerability VCID-y14s-8wpj-wygd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@2.4.1
17
url pkg:pypi/tornado@3.0
purl pkg:pypi/tornado@3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3y8v-vsd8-ubba
1
vulnerability VCID-62bx-a5uf-j3b4
2
vulnerability VCID-6knn-nt2y-1uem
3
vulnerability VCID-8kva-hv12-9ydc
4
vulnerability VCID-be89-uuxa-fyb5
5
vulnerability VCID-e25f-6gkj-vfgw
6
vulnerability VCID-jbwv-ayru-8fgm
7
vulnerability VCID-jf6j-dngc-6qdp
8
vulnerability VCID-y14s-8wpj-wygd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@3.0
18
url pkg:pypi/tornado@3.0.1
purl pkg:pypi/tornado@3.0.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3y8v-vsd8-ubba
1
vulnerability VCID-62bx-a5uf-j3b4
2
vulnerability VCID-6knn-nt2y-1uem
3
vulnerability VCID-8kva-hv12-9ydc
4
vulnerability VCID-be89-uuxa-fyb5
5
vulnerability VCID-e25f-6gkj-vfgw
6
vulnerability VCID-jbwv-ayru-8fgm
7
vulnerability VCID-jf6j-dngc-6qdp
8
vulnerability VCID-y14s-8wpj-wygd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@3.0.1
19
url pkg:pypi/tornado@3.0.2
purl pkg:pypi/tornado@3.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3y8v-vsd8-ubba
1
vulnerability VCID-62bx-a5uf-j3b4
2
vulnerability VCID-6knn-nt2y-1uem
3
vulnerability VCID-8kva-hv12-9ydc
4
vulnerability VCID-be89-uuxa-fyb5
5
vulnerability VCID-e25f-6gkj-vfgw
6
vulnerability VCID-jbwv-ayru-8fgm
7
vulnerability VCID-jf6j-dngc-6qdp
8
vulnerability VCID-y14s-8wpj-wygd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@3.0.2
20
url pkg:pypi/tornado@3.1
purl pkg:pypi/tornado@3.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3y8v-vsd8-ubba
1
vulnerability VCID-62bx-a5uf-j3b4
2
vulnerability VCID-6knn-nt2y-1uem
3
vulnerability VCID-8kva-hv12-9ydc
4
vulnerability VCID-be89-uuxa-fyb5
5
vulnerability VCID-e25f-6gkj-vfgw
6
vulnerability VCID-jbwv-ayru-8fgm
7
vulnerability VCID-jf6j-dngc-6qdp
8
vulnerability VCID-y14s-8wpj-wygd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@3.1
21
url pkg:pypi/tornado@3.1.1
purl pkg:pypi/tornado@3.1.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3y8v-vsd8-ubba
1
vulnerability VCID-62bx-a5uf-j3b4
2
vulnerability VCID-6knn-nt2y-1uem
3
vulnerability VCID-8kva-hv12-9ydc
4
vulnerability VCID-be89-uuxa-fyb5
5
vulnerability VCID-e25f-6gkj-vfgw
6
vulnerability VCID-jbwv-ayru-8fgm
7
vulnerability VCID-jf6j-dngc-6qdp
8
vulnerability VCID-y14s-8wpj-wygd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@3.1.1
22
url pkg:pypi/tornado@3.2
purl pkg:pypi/tornado@3.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3y8v-vsd8-ubba
1
vulnerability VCID-62bx-a5uf-j3b4
2
vulnerability VCID-6knn-nt2y-1uem
3
vulnerability VCID-8kva-hv12-9ydc
4
vulnerability VCID-be89-uuxa-fyb5
5
vulnerability VCID-e25f-6gkj-vfgw
6
vulnerability VCID-jbwv-ayru-8fgm
7
vulnerability VCID-jf6j-dngc-6qdp
8
vulnerability VCID-y14s-8wpj-wygd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@3.2
23
url pkg:pypi/tornado@3.2.1
purl pkg:pypi/tornado@3.2.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-3y8v-vsd8-ubba
1
vulnerability VCID-62bx-a5uf-j3b4
2
vulnerability VCID-6knn-nt2y-1uem
3
vulnerability VCID-8kva-hv12-9ydc
4
vulnerability VCID-be89-uuxa-fyb5
5
vulnerability VCID-e25f-6gkj-vfgw
6
vulnerability VCID-jbwv-ayru-8fgm
7
vulnerability VCID-jf6j-dngc-6qdp
8
vulnerability VCID-y14s-8wpj-wygd
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/tornado@3.2.1
References
0
reference_url http://openwall.com/lists/oss-security/2015/05/19/4
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://openwall.com/lists/oss-security/2015/05/19/4
1
reference_url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9720.json
reference_id
reference_type
scores
url https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9720.json
2
reference_url https://api.first.org/data/v1/epss?cve=CVE-2014-9720
reference_id
reference_type
scores
0
value 0.00904
scoring_system epss
scoring_elements 0.7575
published_at 2026-04-18T12:55:00Z
1
value 0.00904
scoring_system epss
scoring_elements 0.75653
published_at 2026-04-01T12:55:00Z
2
value 0.00904
scoring_system epss
scoring_elements 0.75655
published_at 2026-04-02T12:55:00Z
3
value 0.00904
scoring_system epss
scoring_elements 0.75686
published_at 2026-04-04T12:55:00Z
4
value 0.00904
scoring_system epss
scoring_elements 0.75665
published_at 2026-04-07T12:55:00Z
5
value 0.00904
scoring_system epss
scoring_elements 0.75699
published_at 2026-04-08T12:55:00Z
6
value 0.00904
scoring_system epss
scoring_elements 0.7571
published_at 2026-04-09T12:55:00Z
7
value 0.00904
scoring_system epss
scoring_elements 0.75734
published_at 2026-04-11T12:55:00Z
8
value 0.00904
scoring_system epss
scoring_elements 0.75716
published_at 2026-04-12T12:55:00Z
9
value 0.00904
scoring_system epss
scoring_elements 0.75709
published_at 2026-04-13T12:55:00Z
10
value 0.00904
scoring_system epss
scoring_elements 0.75747
published_at 2026-04-16T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2014-9720
3
reference_url https://bugzilla.novell.com/show_bug.cgi?id=930362
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://bugzilla.novell.com/show_bug.cgi?id=930362
4
reference_url https://bugzilla.redhat.com/show_bug.cgi?id=1222816
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://bugzilla.redhat.com/show_bug.cgi?id=1222816
5
reference_url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9720
reference_id
reference_type
scores
url https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-9720
6
reference_url https://github.com/pypa/advisory-database/tree/main/vulns/tornado/PYSEC-2020-213.yaml
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/pypa/advisory-database/tree/main/vulns/tornado/PYSEC-2020-213.yaml
7
reference_url https://github.com/tornadoweb/tornado
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/tornadoweb/tornado
8
reference_url https://github.com/tornadoweb/tornado/commit/1c36307463b1e8affae100bf9386948e6c1b2308
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/tornadoweb/tornado/commit/1c36307463b1e8affae100bf9386948e6c1b2308
9
reference_url https://nvd.nist.gov/vuln/detail/CVE-2014-9720
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2014-9720
10
reference_url http://www.tornadoweb.org/en/stable/releases/v3.2.2.html
reference_id
reference_type
scores
0
value 6.5
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
1
value 7.1
scoring_system cvssv4
scoring_elements CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
2
value HIGH
scoring_system generic_textual
scoring_elements
url http://www.tornadoweb.org/en/stable/releases/v3.2.2.html
11
reference_url https://github.com/advisories/GHSA-8vpw-mgpf-mpvv
reference_id GHSA-8vpw-mgpf-mpvv
reference_type
scores
0
value HIGH
scoring_system cvssv3.1_qr
scoring_elements
url https://github.com/advisories/GHSA-8vpw-mgpf-mpvv
Weaknesses
0
cwe_id 203
name Observable Discrepancy
description The product behaves differently or sends different responses under different circumstances in a way that is observable to an unauthorized actor, which exposes security-relevant information about the state of the product, such as whether a particular operation was successful or not.
1
cwe_id 201
name Insertion of Sensitive Information Into Sent Data
description The code transmits data to another actor, but a portion of the data includes sensitive information that should not be accessible to that actor.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
3
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
Exploits
Severity_range_score6.5 - 8.9
Exploitability0.5
Weighted_severity8.0
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-8kva-hv12-9ydc