Medium
CVE-2017-6484
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
High
CVE-2017-5594
Pagekit Weak Password Recovery Mechanism for Forgotten Password
High
CVE-2017-8028
Improper Authentication in Pivotal Spring-LDAP
High
CVE-2015-6926
OXID eShop user impersonation vulnerability
High
CVE-2017-8874
Mautic Cross-Site Request Forgery (CSRF)
Critical
CVE-2017-1000487
OS Command Injection in Plexus-utils
High
CVE-2016-4978
Apache ActiveMQ Artemis RCE Via Deserialization Gadget Chain
High
CVE-2017-12174
Uncontrolled Resource Consumption in Artemis and HornetQ
Critical
CVE-2018-9019
Dolibarr SQL Injection vulnerability
Medium
CVE-2016-2402
Improper Certificate Validation in OkHttp
High
CVE-2016-4970
Loop with Unreachable Exit Condition in Netty
Medium
CVE-2016-10027
Smack allows the bypass of TLS protections
Low
CVE-2017-15709
ActiveMQ's OpenWire protocol exposes certain system details as plain text
Medium
CVE-2014-8991
pip 1.3 through 1.5.6 allows local users to cause a denial of service (prevention of package installation) by creating a /tmp/pip-build-* file for another user.
High
CVE-2018-16552
MicroPyramid Django-CRM 0.2 allows CSRF for /users/create/, /users/##/edit/, and /accounts/##/delete/ URIs.
Medium
CVE-2015-2296
The resolve_redirects function in sessions.py in requests 2.1.0 through 2.5.3 allows remote attackers to conduct session fixation attacks via a cookie without a host value in a redirect.
Medium
CVE-2017-14077
Securimage HTML Injection
Critical
CVE-2018-14009
Codiad remote code execution vulnerability
Medium
CVE-2017-5646
Apache Knox allows impersonation of users
Medium
CVE-2015-2944
Improper Neutralization of Input During Web Page Generation in Apache Sling
High
CVE-2017-15363
Luracast Restler directory traversal vulnerability
Medium
CVE-2012-5783
Improper Certificate Validation in Apache Commons HttpClient
Medium
CVE-2018-1190
Pivotal Cloud Foundry UAA XSS on UAA OpenID Connect check session iframe endpoint
Medium
CVE-2017-8031
Cloud Foundry UAA Denial of Service through client token revocation endpoint
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.