Unrated
CVE-2015-1613
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,787
Reset filters
Unrated
CVE-2014-5277
Docker before 1.3.1 and docker-py before 0.5.3 fall back to HTTP when the HTTPS connection to the registry fails, which allows man-in-the-middle attackers to conduct downgrade attacks and obtain authe
High
CVE-2012-6661
Plone and Zope2 do not reseed pseudo-random number generator
Critical
CVE-2011-4103
Django-piston and Django-tastypie do not properly deserialize YAML data
Critical
CVE-2014-1929
python-gnupg vulnerable to shell injection
High
CVE-2014-1928
python-gnupg's shell_quote function does not properly escape characters
High
CVE-2014-1927
python-gnupg's shell_quote function does not properly quote strings
Medium
CVE-2014-1830
Exposure of Sensitive Information to an Unauthorized Actor in Requests
Medium
CVE-2014-1829
Exposure of Sensitive Information to an Unauthorized Actor in Requests
High
CVE-2014-7144
OpenStack keystonemiddleware (formerly python-keystoneclient) 0.x before 0.11.0 and 1.x before 1.2.0 disables certification verification when the "insecure" option is set in a paste configuration (pas
High
CVE-2012-5507
Plone and Zope2 affected by Race Condition
High
CVE-2012-5503
Plone allows remote attackers to read hidden folder contents
High
CVE-2012-5489
Plone and Zope2 vulnerable to unauthorized access to restricted attributes
High
CVE-2012-5486
HTTP header injection in Plone and Zope2
High
CVE-2014-5251
OpenStack Identity (Keystone) Multiple vulnerabilities in revocation events
High
CVE-2014-5252
OpenStack Identity (Keystone) UUID v2 tokens does not expire with revocation events
High
CVE-2014-5253
OpenStack Keystone Domain-scoped tokens don't get revoked
High
CVE-2013-7323
python-gnupg allows context-dependent attackers to execute arbitrary commands via shell metacharacters
Medium
CVE-2014-3840
Mayan EDMS multiple cross-site scripting (XSS) vulnerabilities
High
CVE-2014-1402
Incorrect Privilege Assignment in Jinja2
Low
CVE-2014-0134
OpenStack Nova host data leak to vm instance in rescue mode
Medium
CVE-2013-7061
Products/CMFPlone/CatalogTool.py in Plone 3.3 through 4.3.2 allows remote administrators to bypass restrictions and obtain sensitive information via an unspecified search API.
Medium
CVE-2013-7060
Products/CMFPlone/FactoryTool.py in Plone 3.3 through 4.3.2 allows remote attackers to obtain the installation path via vectors related to a file object for unspecified documentation which is initiali
Medium
CVE-2014-1933
Pillow Temporary file name leakage
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.