| Bug | jessie | Description |
|---|
| CVE-2023-45158 | vulnerable | An OS command injection vulnerability exists in web2py 2.24.1 and earl ... |
| CVE-2023-22432 | vulnerable | Open redirect vulnerability exists in web2py versions prior to 2.23.1. ... |
| CVE-2022-33146 | vulnerable | Open redirect vulnerability in web2py versions prior to 2.22.5 allows ... |
| CVE-2016-10321 | vulnerable (no DSA, ignored) | web2py before 2.14.6 does not properly check if a host is denied befor ... |
| CVE-2016-4808 | vulnerable (no DSA, ignored) | Web2py versions 2.14.5 and below was affected by CSRF (Cross Site Requ ... |
| CVE-2016-4807 | vulnerable (no DSA, ignored) | Web2py versions 2.14.5 and below was affected by Reflected XSS vulnera ... |
| CVE-2016-4806 | vulnerable (no DSA, ignored) | Web2py versions 2.14.5 and below was affected by Local File Inclusion ... |
| CVE-2015-6961 | vulnerable (no DSA, ignored) | Open redirect vulnerability in gluon/tools.py in Web2py 2.9.11 allows ... |