High
CVE-2017-9790
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,687
Medium
CVE-2017-8879
Dolibarr allows password changes without supplying the current password
High
CVE-2017-8700
Cross-origin Resource Sharing bypass in ASP.NET Core
Medium
CVE-2017-8388
GeniXCMS Mailbox validation logic vulnerability
Medium
CVE-2017-8383
Craft CMS Unauthorized View
Medium
CVE-2017-8039
Insecure Default Initialization of Resource in Pivotal Spring Web Flow
Critical
CVE-2017-7893
In SaltStack Salt before 2016.3.6, compromised salt-minions can impersonate the salt-master.
High
CVE-2017-7684
Apache OpenMeetings vulnerable to Uncontrolled Resource Consumption
Medium
CVE-2017-7685
Apache OpenMeetings responds to insecure HTTP methods
High
CVE-2017-7688
Apache OpenMeetings updates user password in insecure manner
High
CVE-2017-7687
Denial of service in Apache Mesos
High
CVE-2017-7680
Apache OpenMeetings allows flash content to be loaded from untrusted domains
High
CVE-2017-7682
Apache OpenMeetings vulnerable to parameter manipulation attacks
Critical
CVE-2017-7673
Apache OpenMeetings has Inadequate Encryption Strength
High
CVE-2017-7561
Inconsistent Interpretation of HTTP Requests in Red Hat JBoss EAP
Medium
CVE-2017-7490
Moodle Unauthorized searching of arbitrary blogs by typing full url
Medium
CVE-2017-7532
Moodle Improper Privilege Management
Medium
CVE-2017-7489
Moodle External blog editing takeover
Medium
CVE-2017-6931
Drupal Settings Tray access bypass
High
CVE-2017-6919
Drupal access control bypass vulnerability
High
CVE-2017-6930
Drupal access bypass vulnerability
Medium
CVE-2017-6928
Drupal access bypass vulnerability
Critical
CVE-2017-6925
Drupal Entity access bypass for entities that do not have UUIDs or have protected revisions
High
CVE-2017-6381
Drupal Remote code execution
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.