Medium
CVE-2017-6921
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2017-7545
XML External Entity Reference in jbpmmigration
Medium
CVE-2017-7559
Undertow vulnerable to Request Smuggling
High
CVE-2017-7556
Cross-Site Request Forgery in hawtio
Medium
CVE-2017-8446
Improper Privilege Management in X-Pack
Medium
CVE-2018-1002202
Improper Limitation of a Pathname to a Restricted Directory in Zip4j
Medium
CVE-2018-1002200
Improper Limitation of a Pathname to a Restricted Directory in plexus-archiver
Medium
CVE-2018-1002208
Improper Limitation of a Pathname to a Restricted Directory in SharpZipLib
Medium
CVE-2018-10894
Keycloak Authentication Error
Medium
CVE-2018-10890
Moodle Exposure of Sensitive Information to an Unauthorized Actor
Medium
CVE-2018-10889
Moodle sensitive information disclosure
Medium
CVE-2018-14636
Live-migrated instances are briefly able to inspect traffic for other instances on the same hypervisor. This brief window could be extended indefinitely if the instance's port is set administratively
Medium
CVE-2018-14631
Moodle Cross-site Scripting
High
CVE-2018-14630
Moodle XML import of ddwtos could lead to intentional remote code execution
Medium
CVE-2018-14658
Keycloak Open Redirect
Medium
CVE-2018-14655
Keycloak vulnerable to cross-site scripting via the state parameter
High
CVE-2018-15761
Cloud Foundry UAA Privilege Escalation
High
CVE-2018-16849
A flaw was found in openstack-mistral. By manipulating the SSH private key filename, the std.ssh action can be used to disclose the presence of arbitrary files within the filesystem of the executor ru
Medium
CVE-2018-17247
Improper Restriction of XML External Entity Reference in Elasticsearch
Medium
CVE-2018-17244
Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch
High
CVE-2018-16854
Moodle Login CSRF vulnerability in login form
High
CVE-2018-1051
Deserialization of Untrusted Data in org.jboss.resteasy:resteasy-yaml-provider
High
CVE-2018-1082
Moodle Improper Authentication
Medium
CVE-2018-1114
Uncontrolled Resource Consumption in Undertow
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.