Medium
CVE-2013-2256
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,534
Medium
CVE-2015-7713
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction
Medium
CVE-2013-4202
OpenStack Cinder Denial of Service using XML entities
Medium
CVE-2012-4457
OpenStack Keystone Token authorization for a user in a disabled tenant is allowed
High
CVE-2012-4456
OpenStack Keystone Improper Authentication vulnerability
Medium
CVE-2016-2140
OpenStack Nova host data access through resize/migration
Medium
CVE-2014-3708
OpenStack Compute (Nova) Denial of Service vulnerability
Medium
CVE-2015-3241
OpenStack Nova instance migration process does not stop when instance is deleted
Low
CVE-2014-7231
OpenStack Oslo utility sensitive information exposure via log files
Medium
CVE-2015-0259
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity
High
CVE-2018-12423
Matrix Synapse Authorization Error
High
CVE-2018-16515
Matrix Synapse Improper Signature Validation
Medium
CVE-2017-1000426
MapProxy vulnerable to cross-site scripting in demo service
High
CVE-2017-15112
keycloak-httpd-client-install Insecure Secrets
Medium
CVE-2014-8333
OpenStack Nova VMware instance leak potentially leading to compute DoS
Medium
CVE-2015-1195
OpenStack Glance v2 API unrestricted path traversal through filesystem:// scheme
Medium
CVE-2017-15111
keycloak-httpd-client-install symlink attack vulnerability
Medium
CVE-2016-3954
web2py exposure of sensitive information
Medium
CVE-2026-57745
RT-Theme 18 Responsive WordPress Theme <= 2.5 - Reflected Cross-Site Scripting
Medium
CVE-2026-14190
Sina Extension for Elementor <= 3.10.1 - Reflected Cross-Site Scripting
Medium
CVE-2026-57740
AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress <= 10.11.1 - Missing Authorization
Critical
CVE-2026-14289
FacturaONE <= 5.36 - Unauthenticated Remote Code Execution
High
CVE-2026-13400
Simply Schedule Appointments <= 1.6.12.3 - Unauthenticated Stored Cross-Site Scripting
Critical
CVE-2026-12394
MemberGlut <= 1.1.4 - Unauthenticated Privilege Escalation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.