Medium
CVE-2017-1000088
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Critical
CVE-2017-12620
Improper Restriction of XML External Entity Reference in Apache OpenNLP
Medium
CVE-2017-14498
Silverstripe CMS XSS Vulnerability
Medium
CVE-2017-10862
Insufficient Data Verification in io.really:jwt-scala
Medium
CVE-2017-12849
Silverstripe CMS User Enumeration
Medium
CVE-2014-8088
Zend Access Restriction Bypass
Medium
CVE-2015-0250
Improper Input Validation in Apache Batik
Critical
CVE-2016-10074
Swift Mailer mail transport Command Injection
Critical
CVE-2016-9014
Django before 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3, when settings.DEBUG is True, allow remote attackers to conduct DNS rebinding attacks by leveraging failure to validate
Critical
CVE-2016-9013
Django 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3 use a hardcoded password for a temporary database user created when running tests with an Oracle database, which makes it easi
Medium
CVE-2017-12623
XML External Entity Reference in Apache NiFi
Medium
CVE-2015-6918
salt before 2015.5.5 leaks git usernames and passwords to the log.
High
CVE-2015-7503
Zend Framework Information Disclosure
High
CVE-2014-3709
JBoss Keycloak CSRF Vulnerability
Critical
CVE-2017-5636
Injection in Apache NiFi
Medium
CVE-2010-3659
TYPO3 Cross-site Scripting vulnerability in the extension manager and backend forms
High
CVE-2017-12628
Apache James Privilege Escalation
Medium
CVE-2015-2575
Improper Access Control in MySQL Connectors Java
Critical
CVE-2017-14695
Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote minions with incorrect credentials t
Medium
CVE-2014-0095
Denial of service in Apache Tomcat
High
CVE-2014-0115
Apache Storm log viewer path traversal vulnerability
High
CVE-2017-14696
SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote attackers to cause a denial of service via a crafted authentication request.
Medium
CVE-2017-15911
Ignite Realtime Openfire Server has Cross-site Scripting vulnerability in admin console
Medium
CVE-2013-6044
The is_safe_url function in utils/http.py in Django 1.4.x before 1.4.6, 1.5.x before 1.5.2, and 1.6 before beta 2 treats a URL's scheme as safe even if it is not HTTP or HTTPS, which might introduce c
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.