High
CVE-2022-2111
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,855
Reset filters
High
CVE-2022-2112
CSV Injection in inventree
Medium
CVE-2022-31117
Potential double free of buffer during string decoding
Medium
CVE-2022-29773
Access control issue in AlekSIS-Core
Medium
CVE-2022-33146
Open redirect in web2py
Medium
CVE-2019-11340
Matrix Sydent mishandles emails
High
CVE-2019-13594
Mirumee Saleor CSRF Protection Disabled
High
CVE-2020-35459
ClusterLabs crmsh vulnerable to shell code injection
Medium
CVE-2020-15703
aptdaemon Information Disclosure via Improper Input Validation in Transaction class
High
CVE-2021-38155
OpenStack Keystone allows information disclosure during account locking
High
CVE-2019-14322
Pallets Werkzeug vulnerable to Path Traversal
Medium
CVE-2019-13628
wolfCrypt leaks cryptographic information via timing side channel
Medium
CVE-2019-10047
PyDio Stored XSS Vulnerability
Low
CVE-2015-9543
OpenStack Nova can leak consoleauth token into log files
Medium
CVE-2011-2185
Fabric vulnerable to symlink attack on tmp files
Medium
CVE-2013-1665
XML External Entity (XXE) in Django
Medium
CVE-2013-1664
XML Entity Expansion (XEE) in Django
High
CVE-2010-2235
Cobbler is vulnerable to code injection
High
CVE-2012-2395
Cobbler subject to Command Injection
High
CVE-2011-3587
Zope Command Execution Vulnerability
Low
CVE-2013-4278
OpenStack Compute (Nova) Resource limit circumvention in Nova private flavors
Medium
CVE-2011-1340
Plone XSS Vulnerability
High
CVE-2011-4030
Plone anonymous access to sub-objects in CMFEditions where KwAsAttributes classes were publishable
Medium
CVE-2014-0056
OpenStack Neutron Improper Authentication vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.