Medium
CVE-2017-7549
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
High
CVE-2018-14635
When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service coul
High
CVE-2017-7466
Ansible before version 2.3 has an input validation vulnerability in the handling of data sent from client systems. An attacker with control over a client system being managed by Ansible, and the abili
High
CVE-2017-2673
An authorization-check flaw was discovered in federation configurations of the OpenStack Identity service (keystone). An authenticated federated user could request permissions to a project and uninten
Medium
CVE-2017-8032
Cloud Foundry UAA Identity Zone Admin Privilege Escalation
Critical
CVE-2016-6637
Cloud Foundry vulnerable to Cross-Site Request Forgery
High
CVE-2017-4991
Cloud Foundry UAA password reset vulnerability
Medium
CVE-2017-4974
Blind SQL Injection with privileged Cloud Foundry UAA endpoints
Critical
CVE-2017-4992
Cloud Foundry UAA privilege escalation with user invitations
High
CVE-2017-4973
Cloud Foundry UAA Privilege Escalation
High
CVE-2017-4960
Cloud Foundry denial of service vulnerability
High
CVE-2016-3084
Cloud Foundry UAA reset password vulnerable to brute force attack
High
CVE-2015-5349
Apache Directory Studio Command Injection
High
CVE-2018-0875
.NET Core Denial of Service Vulnerability
Medium
CVE-2012-2098
Uncontrolled Resource Consumption in Apache Commons Compress
High
CVE-2018-1256
Issuer validation regression in Spring Cloud SSO Connector
Medium
CVE-2018-1263
spring-integration-zip Arbitrary File Write
High
CVE-2018-1262
UAA privilege escalation across identity zones
Low
CVE-2015-3189
Cloud Foundry Runtime has Weak Password Recovery Mechanism for Forgotten Password
Critical
CVE-2015-5172
Cloud Foundry Runtime has Weak Password Recovery Mechanism for Forgotten Password
Critical
CVE-2015-5171
Cloud Foundry Runtime Insufficient Session Expiration vulnerability
High
CVE-2015-5170
Cloud Foundry Runtime Cross-Site Request Forgery vulnerability
Medium
CVE-2017-7251
Pi Cross-site Scripting vulnerability
Medium
CVE-2019-6804
Rundeck Community Edition vulnerable to Cross-site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.