Medium
CVE-2017-7532
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2017-7489
Moodle External blog editing takeover
Medium
CVE-2017-6931
Drupal Settings Tray access bypass
High
CVE-2017-6919
Drupal access control bypass vulnerability
High
CVE-2017-6930
Drupal access bypass vulnerability
Medium
CVE-2017-6928
Drupal access bypass vulnerability
Critical
CVE-2017-6925
Drupal Entity access bypass for entities that do not have UUIDs or have protected revisions
High
CVE-2017-6381
Drupal Remote code execution
Medium
CVE-2017-6370
TYPO3 Information Disclosure Vulnerability
High
CVE-2017-6377
Drupal editor module incorrectly checks access to inline private files
High
CVE-2017-5936
OpenStack Nova-LXD before 13.1.1 uses the wrong name for the veth pairs when applying Neutron security group rules for instances, which allows remote attackers to bypass intended security restrictions
High
CVE-2017-5664
Improper Handling of Exceptional Conditions in Apache Tomcat
Critical
CVE-2017-5651
Expected Behavior Violation in Apache Tomcat
High
CVE-2017-5650
Improper Resource Shutdown or Release in Apache Tomcat
High
CVE-2017-5635
Improper Authentication In Apache NiFi
High
CVE-2017-5200
Salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2 allows arbitrary command execution on a salt-master via Salt's ssh_client.
Medium
CVE-2017-4971
Insecure Default Initialization of Resource in Pivotal Spring Web Flow
Low
CVE-2017-3589
Exposure of Sensitive Information to an Unauthorized Actor in Oracle MySQL Connectors Java
Medium
CVE-2017-3586
Exposure of Sensitive Information to an Unauthorized Actor in Oracle MySQL Connectors Java
High
CVE-2017-3523
Improper Access Control in MySQL Connectors Java
Critical
CVE-2017-18264
phpMyAdmin Improper Privilege Management
Medium
CVE-2017-16759
LibreNMS Arbitrary File Read
Medium
CVE-2017-16653
Symfony CSRF Vulnerability
Critical
CVE-2017-16228
Dulwich before 0.18.5, when an SSH subprocess is used, allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, a related issue to CVE-2017-
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.