Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,533
Cobbler Web Interface Kickstart Template Remote Privilege Escalation Vulnerability
OpenStack Keystone does not invalidate existing tokens when granting or revoking roles
OpenStack Swift Unauthorized delete of versioned Swift object
OpenStack Swift metadata constraints are not correctly enforced
OpenStack Heat template URL information leakage
ocrodjvu is vulnerable to Arbitrary File Modification via symlink attack
OpenStack Neutron Improper Input Validation vulnerability
OpenStack Dashboard (aka Horizon) vulnerable to Cross-site Scripting
OpenStack Swift Unchecked user input in XML responses
OpenStack Nova Multiple directory traversal vulnerabilities
OpenStack Nova Denial of Service in network source security groups
OpenStack Nova Long server names grow nova-api log files significantly
eyeD3 is vulnerable to arbitrary file modification via symlink attack
Cobbler Path Traversal vulnerability
Cobbler XSS Vulnerability
OpenStack Neutron allows remote attackers to bypass an intended DHCP-spoofing protection mechanism
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service
OpenStack Nova DoS through ephemeral disk backing files
OpenStack Nova live snapshots use an insecure local directory
OpenStack Nova Potential Xen connection password leak via StorageError
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.