High
CVE-2016-6816
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Critical
Exploited in attacks
CVE-2016-8735
Apache Tomcat Improper Access Control vulnerability
Medium
CVE-2018-1067
Improper Neutralization of CRLF Sequences in HTTP Headers in Undertow
High
CVE-2019-3849
Moodle Users could elevate their role when accessing the LTI tool on a provider site
Medium
CVE-2019-3808
Moodle XSS Vulnerability
Critical
Exploited in attacks
CVE-2013-2251
Code injection in Apache Struts
Critical
Exploited in attacks
CVE-2019-1003030
Sandbox bypass in Jenkins Pipeline: Groovy Plugin
Medium
CVE-2010-1870
Server side object manipulation in Apache Struts
High
CVE-2019-7611
Improper Access Control in Elasticsearch
Critical
CVE-2015-1832
Improper Restriction of XML External Entity Reference in Apace Derby
Medium
CVE-2016-5000
Apache POI's XLSX2CSV Example XML External Entity (XXE) Vulnerability
High
CVE-2016-2510
Improper Input Validation in BeanShell
Critical
CVE-2018-8013
Deserialization of Untrusted Data in Apache Batik
High
CVE-2017-9096
Improper Restriction of XML External Entity Reference in iText
High
CVE-2017-5662
Improper Restriction of XML External Entity Reference in Apache Batik
Medium
CVE-2017-5644
Improper Restriction of Recursive Entity References in DTDs in Apache POI
Medium
CVE-2017-13098
Observable Discrepancy in BouncyCastle
Medium
CVE-2019-3830
A vulnerability was found in ceilometer before version 12.0.0.0rc1. An Information Exposure in ceilometer-agent prints sensitive configuration data to log files without DEBUG logging being activated.
High
CVE-2018-10891
Moodle XSS Vulnerability
Medium
CVE-2015-8766
Symphony CMS XSS Vulnerabilities
Medium
CVE-2015-8606
Silverstripe CMS XSS Vulnerability
Medium
CVE-2011-4289
Moodle does not recogniz configuration setting that makes e-mail addresses visible only to course members
Medium
CVE-2011-4292
Moodle allows remote authenticated users to cause a denial of service (invalid database records)
Medium
CVE-2011-4291
Moodle allows remote authenticated users to cause a denial of service (invalid database records)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.