Critical
CVE-2012-4449
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2012-5181
Concrete5 Vulnerable to Cross-Site Scripting (XSS)
Low
CVE-2017-1000242
Insecure temporary file usage in Jenkins Git Client Plugin
Critical
CVE-2015-3933
MetalGenix GeniXCMS vulnerable to SQL Injection
High
CVE-2017-11870
Chakra Core vulnerable to privilege escalation when writing to JavaScript null scope objects
High
CVE-2017-11862
Chakra Core vulnerable to privilege escalation due to type confusion
High
CVE-2017-11871
Chakra Core vulnerable to privilege escalation due to reading an invalid pointer
High
CVE-2017-16762
Sanic before 0.5.1 allows reading arbitrary files with directory traversal, as demonstrated by the /static/..%2f substring.
Medium
CVE-2017-16880
filp whoops Cross-site Scripting vulnerability
High
CVE-2017-8585
Improper Input Validation in Microsoft.NETCore.App
High
CVE-2017-15806
Zeta Components Mail Arbitrary code execution via a crafted email address
High
CVE-2017-14251
TYPO3 Arbitrary Code Execution
High
CVE-2017-1000247
CodeIgniter HTTP Header Injection
Medium
CVE-2017-1000209
nv-websocket-client allows attackers to spoof SSL/TLS servers via an arbitrary valid certificate
Medium
CVE-2017-15110
Moodle Exposure of Sensitive Information to an Unauthorized Actor
High
CVE-2017-15054
TeamPass arbitrary file upload vulnerability
Medium
CVE-2017-15051
TeamPass stored cross-site scripting (XSS) vulnerability
Critical
CVE-2017-16613
An issue was discovered in middleware.py in OpenStack Swauth through 1.2.0 when used with OpenStack Swift through 2.15.1. The Swift object store and proxy server are saving (unhashed) tokens retrieved
Critical
CVE-2017-8045
Deserialization of Untrusted Data in Spring AMQP
Medium
CVE-2016-4993
Improper Neutralization of CRLF Sequences in Wildfly Undertow
Medium
CVE-2016-7046
Undertow Uncaught Exception vulnerability
High
CVE-2017-17054
In aubio 0.4.6, a divide-by-zero error exists in the function new_aubio_source_wavread() in source_wavread.c, which may lead to DoS when playing a crafted audio file.
Medium
CVE-2014-0086
JBoss RichFaces Improper Input Validation vulnerability
Low
CVE-2014-0105
The auth_token middleware in the OpenStack Python client library for Keystone (aka python-keystoneclient) before 0.7.0 does not properly retrieve user tokens from memcache, which allows remote authent
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.