High
CVE-2022-2111
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 4,358
Reset filters
Medium
CVE-2019-11340
Matrix Sydent mishandles emails
High
CVE-2021-38155
OpenStack Keystone allows information disclosure during account locking
Medium
CVE-2019-13628
wolfCrypt leaks cryptographic information via timing side channel
Medium
CVE-2019-10047
PyDio Stored XSS Vulnerability
Low
CVE-2015-9543
OpenStack Nova can leak consoleauth token into log files
Medium
CVE-2011-2185
Fabric vulnerable to symlink attack on tmp files
High
CVE-2010-2235
Cobbler is vulnerable to code injection
Medium
CVE-2014-3242
SOAPpy vulnerable to XML External Entity attacks
Medium
CVE-2013-2096
OpenStack Compute (Nova) does not verify the virtual size of a QCOW2 image
Low
CVE-2013-4477
OpenStack Identity Keystone Privilege Escalation vulnerability
Medium
CVE-2014-3243
SOAPpy vulnerable to XXE attacks
Medium
CVE-2013-6419
OpenStack Nova Router metadata queries are not restricted by tenant
Medium
CVE-2014-3641
OpenStack Cinder Exposure of Sensitive Information to an Unauthorized Actor vulnerability
Medium
CVE-2014-0167
OpenStack Compute (Nova) allows remote authenticated users to gain privileges via API requests
Medium
CVE-2017-7266
Netflix Security Monkey Open Redirect vulnerability
Low
CVE-2013-4469
OpenStack Compute (Nova) Denial of service due to improper validation of virtual size of QCOW2 image
Medium
CVE-2015-5223
OpenStack Object Storage (Swift) Sensitive Data Exposure
Medium
CVE-2017-7200
OpenStack Glance Server-Side Request Forgery (SSRF)
Medium
CVE-2012-4413
OpenStack Keystone does not invalidate existing tokens when granting or revoking roles
Medium
CVE-2015-1856
OpenStack Swift Unauthorized delete of versioned Swift object
Medium
CVE-2014-7960
OpenStack Swift metadata constraints are not correctly enforced
Low
CVE-2014-3801
OpenStack Heat template URL information leakage
Medium
CVE-2015-3221
OpenStack Neutron Improper Input Validation vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.