Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,358
Reset filtersOpenStack Nova Potential Xen connection password leak via StorageError
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information
OpenStack Oslo utility sensitive information exposure via log files
web2py exposure of sensitive information
In Trail of Bits fickling versions up to and including 0.1.11, the UnsafeImportsML analysis pass unconditionally calls AnalysisContext.shorten_code(node) on every import node it inspects, regardless o
Trail of Bits fickling versions up to and including 0.1.10 do not include the Python standard library modules _posixsubprocess, site, and atexit in the UNSAFE_IMPORTS denylist (fickle.py). Because the
Openstack Aodh can be used to launder Keystone trusts
OpenStack Keystone Logs Passwords
OpenStack Identity Keystone Improper Privilege Management
OpenStack Identity Keystone is vulnerable to Block delegation escalation of privilege
OpenStack Keystone allows context-dependent attackers to bypass access restrictions
OpenStack Ironic Exposure of Sensitive Information to an Unauthorized Actor
Plone credentials stored in session cookie
Plone Improper Session Management
Plone CMS Improper Session Management
MoinMoin Improper ACL handling for calendars and includes
MoinMoin Cross-Site Scripting (XSS) vulnerability via hitcounts and general parameters
MoinMoin Multiple cross-site scripting (XSS) vulnerabilities
Plone allows remote users to modify arbitrary portraits
Django Improper Access Control
OpenStack Nova Exposure of Sensitive Information to an Unauthorized Actor
MoinMoin Improper Privilege Management
MoinMoin Improper Access Control
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.