Medium
CVE-2016-8647
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,787
Reset filters
Medium
CVE-2011-1950
Plone and plone.app.users allow remote authenticated users to modify the properties of arbitrary accounts
Medium
CVE-2011-1948
Cross-site scripting in Products.CMFPlone and Products.PasswordResetTool
Medium
CVE-2009-0662
Moderate severity vulnerability that affects Products.PlonePAS
Critical
CVE-2018-14505
Mitmweb in mitmproxy allows DNS Rebinding attacks
Critical
CVE-2017-7481
Ansible fails to properly mark lookup-plugin results as unsafe
High
CVE-2017-2809
An exploitable vulnerability exists in the yaml loading functionality of ansible-vault before 1.0.5. A specially crafted vault can execute arbitrary python commands resulting in command execution. An
High
CVE-2018-10895
Qutebrowser CSRF Vulnerability
High
CVE-2018-10855
Ansible exposes sensitive data in log files and on the terminal
Critical
CVE-2017-18342
PyYAML insecurely deserializes YAML strings leading to arbitrary code execution
Medium
CVE-2018-1000559
Qutebrowser XSS Vulnerability
High
CVE-2018-1000519
aiohttp-session Session Fixation vulnerability
High
CVE-2018-1000518
websockets is vulnerable to denial of service by memory exhaustion
High
CVE-2017-2592
oslo.middleware Information Disclosure vulnerability
Critical
CVE-2013-2233
Ansible fails to cache SSH host keys
Critical
CVE-2016-9587
Ansible is vulnerable to an improper input validation in Ansible's handling of data sent from client systems
High
CVE-2018-1000164
Gunicorn contains Improper Neutralization of CRLF sequences in HTTP headers
High
CVE-2018-1000159
tlslite-ng off-by-one error on mac checking
Critical
CVE-2017-0359
Diffoscope may write to arbitrary locations due to an untrusted archive
High
CVE-2018-0023
JSNAPy allows unprivileged local users to alter files under the directory
High
CVE-2018-9856
Kotti CSRF in the local roles implementation
Critical
CVE-2014-3539
Code injection in rope
Critical
CVE-2018-1002150
Koji hub call does not perform correct access checks
High
CVE-2018-8768
Jupyter Notebook file bypasses sanitization, executes JavaScript
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.