High
CVE-2014-8350
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2016-2512
The utils.http.is_safe_url function in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks or possibly conduct cro
Low
CVE-2016-2513
The password hasher in contrib/auth/hashers.py in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to enumerate users via a timing attack involving login requests.
Critical
CVE-2016-3086
Exposure of Sensitive Information to an Unauthorized Actor in Apache Hadoop
Critical
CVE-2017-14238
Dolibarr SQL injection vulnerability in admin/menus/edit.php
Critical
CVE-2017-14242
Dolibarr SQL injection vulnerability in don/list.php
Medium
CVE-2017-14241
Dolibarr ERP and CRM contain XSS Vulnerability
High
CVE-2017-14240
Dolibarr ERP and CRM Sensitive Data Disclosure
Medium
CVE-2011-1475
Apache Tomcat HTTP BIO Connector Error Discloses Information From Different Requests to Remote Users
Medium
CVE-2012-3546
Authentication Bypass in Apache Tomcat
Medium
CVE-2012-4431
Cross-Site Request Forgery in Apache Tomcat
Medium
CVE-2012-5885
Improper Access Control in Apache Tomcat
Low
CVE-2013-2013
The user-password-update command in python-keystoneclient before 0.2.4 accepts the new password in the --password argument, which allows local users to obtain sensitive information by listing the proc
Medium
CVE-2017-14231
GeniXCMS denial of service (account blockage)
Medium
CVE-2017-14239
Dolibarr cross-site scripting (XSS) vulnerability
High
CVE-2015-3250
Exposure of Sensitive Information to an Unauthorized Actor in Apache Directory LDAP API
Medium
CVE-2017-12156
Moodle XSS Vulnerability
High
CVE-2016-8737
Apache Brooklyn is vulnerable to cross-site request forgery (CSRF)
Medium
CVE-2014-9635
Jenkins HttpOnly flag not Set for session cookies
Medium
CVE-2014-9634
Jenkins secure flag not set on session cookies
High
CVE-2015-1831
Incomplete exclude pattern in Apache Struts
High
CVE-2015-5144
Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 uses an incorrect regular expression, which allows remote attackers to inject arbitrary headers and conduct HTTP r
High
CVE-2015-5145
validators.URLValidator in Django 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.
Medium
CVE-2017-13761
Fastly Magento2 sensitive information disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.