Medium
CVE-2017-7200
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 2,016
Reset filters
Medium
CVE-2013-4185
OpenStack Nova Denial of Service in network source security groups
Medium
CVE-2012-1585
OpenStack Nova Long server names grow nova-api log files significantly
Medium
CVE-2014-3708
OpenStack Compute (Nova) Denial of Service vulnerability
High
CVE-2022-1592
Server-Side Request Forgery in scout-browser
Medium
CVE-2008-1396
Plone credentials stored in session cookie
Medium
CVE-2002-0687
Zope Server vulnerable to DoS via header injection
Medium
CVE-2004-0412
Mailman Sensitive Information Disclosure
Medium
CVE-2022-41952
Uncontrolled Resource Consumption in Matrix Synapse
Medium
CVE-2022-0959
pgAdmin 4 Path Traversal vulnerability
Medium
CVE-2022-25511
Path traversal in FreeTAKServer-UI
High
CVE-2022-25512
Exposure of Sensitive Information to an Unauthorized Actor in FreeTAKServer-UI
Medium
CVE-2022-25506
SQL Injection in FreeTAKServer-UI
Medium
CVE-2022-25507
Cross-site Scripting in FreeTAKServer-UI
Medium
CVE-2022-0637
open redirect in pollbot
High
CVE-2021-41499
Classic Buffer Overflow in pyo
Low
CVE-2017-8761
Temporary urls leaked via logging
High
CVE-2026-54263
Wagtail: Reflected XSS in dynamic image URL generator view
High
CVE-2026-57516
Ray: Arbitrary code execution via ray.data.read_webdataset default decoder: pickle.loads(value) and torch.load(weights_only=False)
High
CVE-2026-58168
DeepTutor missing MCP tool authorization allows non-admin users to invoke unrestricted tools
Critical
CVE-2026-48039
Meta Ads MCP: Unauthenticated HTTP MCP Tool Execution Leaks Operator Meta Access Token
Critical
CVE-2026-44727
Jupyter Server: Stored XSS in `NbconvertFileHandler` / `NbconvertPostHandler` via missing `sandbox` CSP
Critical
CVE-2026-49468
LiteLLM: Authentication Bypass via Host Header Injection
Critical
CVE-2026-22778
vLLM has RCE In Video Processing
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.