Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,861
Reset filtersOpenStack Glance improper validation of the image_size_cap configuration option
Cobbler vulnerable to code injection via unsafe YAML loading
OpenStack Cinder file disclosure in image convert
OpenStack Image Service (Glance) allows remote authenticated users to bypass access restrictions
Web2py Cross-Site Request Forgery vulnerability
Web2py Reflected XSS vulnerability
OpenStack Object Storage (Swift) allows remote attackers to cause a denial of service
Netflix Security Monkey Open Redirect vulnerability
OpenStack Nova denial of service through compressed disk images
OpenStack Compute (Nova) Denial of service due to improper validation of virtual size of QCOW2 image
OpenStack Neutron Race condition vulnerability
Matrix Synapse DoS
Loggerhead XSS via filename
OpenStack Horizon Cross-site Scripting (XSS)
Openstack DBaaS (Trove) Improper Link Resolution Before File Access
OpenStack Object Storage (Swift) Sensitive Data Exposure
Reddit Terminal Viewer (RTV) vulnerable to argument injection attacks
OpenStack Glance Server-Side Request Forgery (SSRF)
Cobbler Web Interface Kickstart Template Remote Privilege Escalation Vulnerability
OpenStack Keystone does not invalidate existing tokens when granting or revoking roles
OpenStack Swift Unauthorized delete of versioned Swift object
OpenStack Swift metadata constraints are not correctly enforced
OpenStack Heat template URL information leakage
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.