High
CVE-2012-5503
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,824
Reset filters
High
CVE-2012-5489
Plone and Zope2 vulnerable to unauthorized access to restricted attributes
High
CVE-2012-5486
HTTP header injection in Plone and Zope2
High
CVE-2014-5251
OpenStack Identity (Keystone) Multiple vulnerabilities in revocation events
High
CVE-2014-5252
OpenStack Identity (Keystone) UUID v2 tokens does not expire with revocation events
High
CVE-2014-5253
OpenStack Keystone Domain-scoped tokens don't get revoked
High
CVE-2013-7323
python-gnupg allows context-dependent attackers to execute arbitrary commands via shell metacharacters
Medium
CVE-2014-3840
Mayan EDMS multiple cross-site scripting (XSS) vulnerabilities
High
CVE-2014-1402
Incorrect Privilege Assignment in Jinja2
Low
CVE-2014-0134
OpenStack Nova host data leak to vm instance in rescue mode
Medium
CVE-2013-7061
Products/CMFPlone/CatalogTool.py in Plone 3.3 through 4.3.2 allows remote administrators to bypass restrictions and obtain sensitive information via an unspecified search API.
Medium
CVE-2013-7060
Products/CMFPlone/FactoryTool.py in Plone 3.3 through 4.3.2 allows remote attackers to obtain the installation path via vectors related to a file object for unspecified documentation which is initiali
Medium
CVE-2014-1933
Pillow Temporary file name leakage
High
CVE-2014-2828
OpenStack Identity (Keystone) DoS through V3 API authentication chaining
High
CVE-2014-2237
OpenStack Identity (Keystone) Trustee token revocations does not work with memcache backend
High
CVE-2014-2573
OpenStack Nova VMWare driver leaks rescued images
Medium
CVE-2014-1839
Creation of Temporary File With Insecure Permissions in logilab-commons
High
CVE-2014-1838
Improper Link Resolution Before File Access in logilab-commons
Medium
CVE-2014-1948
OpenStack Glance sensitive information disclosure via logs
High
CVE-2013-7130
OpenStack Nova Live migration can leak root disk into ephemeral storage
Low
CVE-2014-1604
The parser cache functionality in parsergenerator.py in RPLY (aka python-rply) before 0.7.1 allows local users to spoof cache data by pre-creating a temporary rply-*.json file with a predictable name.
High
CVE-2013-4439
Minion identity not validated in saltstack
Unrated
CVE-2013-4438
Salt (aka SaltStack) before 0.17.1 allows remote attackers to execute arbitrary YAML code via unspecified vectors. NOTE: the vendor states that this might not be a vulnerability because the YAML to b
Unrated
CVE-2013-5943
Multiple cross-site scripting (XSS) vulnerabilities in Graphite before 0.9.11 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.