Vulnerability Database

  • Total number of vulnerabilities in the DB: 290,476
With exploit

tornadoweb / tornado

Title Severity Exploit Date Affected Version
CVE-2023-28370 Medium May 25, 2023 < 6.3.2
CVE-2014-9720 Medium Jan 24, 2020 < 3.2.2
CVE-2012-2374 Medium May 23, 2012 == 1.1
== 2.1
== 2.0
== 1.0
== 1.2.1
== 1.1.1
== 1.0.1
<= 2.2
== 1.2
== 2.1.1

docmosis / tornado

Title Severity Exploit Date Affected Version
CVE-2024-42733 Unknown Mar 7, 2025 <= 2.9.7
CVE-2023-25264 High Feb 28, 2023 < 2.9.5
CVE-2023-25265 High Feb 28, 2023 < 2.9.5
CVE-2023-25266 High Feb 28, 2023 < 2.9.5

tornado

Title Severity Exploit Date Affected Version
CVE-2025-47287 High May 16, 2025 < 6.5
Tornado has a CRLF injection in CurlAsyncHTTPClient headers Medium Jun 6, 2024 < 6.4.1
Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') in tornado Medium Jun 6, 2024 < 6.4.1
Tornado vulnerable to HTTP request smuggling via improper parsing of `Content-Length` fields and chunk lengths Medium Aug 14, 2023 < 6.3.3
CVE-2023-28370 Medium May 25, 2023 < 6.3.2