High
CVE-2014-3589
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,737
High
CVE-2014-3429
IPython Notebook 0.12 through 1.x before 1.2 does not validate the origin of websocket requests, which allows remote attackers to execute arbitrary code by leveraging knowledge of the kernel id and a
Medium
CVE-2013-2027
Jython Improper Access Restrictions vulnerability
Medium
CVE-2014-4616
simplejson before 2.6.1 vulnerable to array index error
High
CVE-2014-0481
The default configuration for the file upload handling system in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 uses a sequential file name generation
High
CVE-2015-7809
Twig remote code execution in templates
High
CVE-2014-3498
The user module in ansible before 1.6.6 allows remote authenticated users to execute arbitrary commands.
Low
CVE-2013-4259
runner/connection_plugins/ssh.py in Ansible before 1.2.3, when using ControlPersist, allows local users to redirect a ssh session via a symlink attack on a socket file with a predictable name in /tmp/
Medium
CVE-2013-4260
lib/ansible/playbook/__init__.py in Ansible 1.2.x before 1.2.3, when playbook does not run due to an error, allows local users to overwrite arbitrary files via a symlink attack on a retry file with a
Medium
CVE-2018-8315
ChakraCore information disclosure vulnerability
Critical
CVE-2018-16385
ThinkPHP SQL Injection vulnerability
Medium
CVE-2018-14059
Pimcore XSS Vulnerability
High
CVE-2018-16650
phpMyFAQ CSRF
High
CVE-2018-11758
XML External Entity Reference in Apache Cayenne
Medium
CVE-2018-1000665
Improper Neutralization of Input During Web Page Generation in Dojo Dojo Objective Harness
Medium
CVE-2017-10795
Subrion Cross-site scripting (XSS) vulnerability
High
CVE-2017-15063
Subrion CMS CSRF Vulnerability
High
CVE-2018-15121
Auth0-ASPNET and Auth0-ASPNET-Owin vulnerable to Cross-Site Request Forgery
Critical
CVE-2017-5543
Subrion CMS PHP Object Injection
Medium
CVE-2018-14840
Subrion CMS Cross-site Scripting
Medium
CVE-2014-9120
Subrion CMS Cross-site scripting in search
Medium
CVE-2018-15563
Subrion CMS Stored Cross-site Scripting (XSS)
Medium
CVE-2018-16327
Subrion Cross-site Scripting (XSS)
Medium
CVE-2018-11352
Wallabag cross-site scripting (XSS) vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.