Unrated
CVE-2013-5943
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,801
Reset filters
Medium
CVE-2013-4294
OpenStack Identity (Keystone) allows remote attackers to bypass intended access restrictions via revoked PKI token
Medium
CVE-2013-2217
cache.py in Suds 0.4, when tempdir is set to None, allows local users to redirect SOAP queries and possibly have other unspecified impact via a symlink attack on a cache file with a predictable name i
Medium
CVE-2013-4183
OpenStack Cinder LVMVolumeDriver does not zero deleted snapshots
Medium
CVE-2013-1888
Improper Link Resolution Before File Access in pip
Medium
CVE-2013-2132
Use of NullPointerException Catch to Detect NULL Pointer Dereference in Pymongo
High
CVE-2013-1629
Improper Input Validation in pip
Medium
CVE-2013-2059
OpenStack Identity (Keystone) improper revoking of the authentication token when deleting a user
High
CVE-2013-0335
OpenStack Compute Nova Unauthorised access to arbitrary VM using VNC token from deleted VM
High
CVE-2013-1838
OpenStack Compute (Nova) Denial of service via a large number of calls to the addFixedIp function
Medium
CVE-2013-0212
OpenStack Glance logs user name and password in cleartext
Medium
CVE-2012-5625
OpenStack Compute (Nova) Folsom before 2012.2.2 and Grizzly, when using libvirt and LVM backed instances, does not properly clear physical volume (PV) content when reallocating for instances, which al
Medium
CVE-2012-5571
OpenStack Keystone intended authorization restrictions bypass
High
CVE-2012-3542
OpenStack Keystone Allows Remote User Account Creation
Unrated
CVE-2012-3540
Open redirect vulnerability in views/auth_forms.py in OpenStack Dashboard (Horizon) Essex (2012.1) allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a U
High
CVE-2012-2921
feedparser denial of service vulnerability
High
CVE-2011-4462
Plone Denial of Service vulnerability
High
CVE-2011-4140
Django Cross-Site Request Forgery vulnerability
High
CVE-2011-4137
Denial of service in django
Medium
CVE-2011-4136
Session manipulation in Django
High
CVE-2011-2528
High severity vulnerability that affects Plone and Zope2
Medium
CVE-2011-1949
Plone Cross-site Scripting vulnerability
Medium
CVE-2011-1158
feedparser Cross-site Scripting vulnerability
Medium
CVE-2011-1157
feedparser Cross-site Scripting vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.