Medium
CVE-2018-14040
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Medium
CVE-2010-4183
HTML Purifier cross-site scripting (XSS) vulnerability
High
CVE-2011-5034
Apache Geronimo Hash Collisions Cause DoS
High
CVE-2018-10875
A flaw was found in ansible. ansible.cfg is read from the current working directory which can be altered to make it point to a plugin or a module path under the control of an attacker, thus allowing t
High
CVE-2019-10876
An issue was discovered in OpenStack Neutron 11.x before 11.0.7, 12.x before 12.0.6, and 13.x before 13.0.3. By creating two security groups with separate/overlapping port ranges, an authenticated use
High
CVE-2018-16876
ansible before versions 2.5.14, 2.6.11, 2.7.5 is vulnerable to a information disclosure flaw in vvv+ mode with no_log on that can lead to leakage of sensible data.
High
CVE-2018-16856
In a default Red Hat Openstack Platform Director installation, openstack-octavia before versions openstack-octavia 2.0.2-5 and openstack-octavia-3.0.1-0.20181009115732 creates log files that are reada
High
CVE-2019-9735
An issue was discovered in the iptables firewall module in OpenStack Neutron before 10.0.8, 11.x before 11.0.7, 12.x before 12.0.6, and 13.x before 13.0.3. By setting a destination port in a security
High
CVE-2018-10874
In ansible it was found that inventory variables are loaded from current working directory when running ad-hoc command which are under attacker's control, allowing to run arbitrary code as a result.
Medium
CVE-2017-7549
instack-undercloud vulnerable to symlink attack on tmp files
High
CVE-2018-14635
When using the Linux bridge ml2 driver, non-privileged tenants are able to create and attach ports without specifying an IP address, bypassing IP address validation. A potential denial of service coul
High
CVE-2017-7466
Ansible before version 2.3 has an input validation vulnerability in the handling of data sent from client systems. An attacker with control over a client system being managed by Ansible, and the abili
High
CVE-2017-2673
An authorization-check flaw was discovered in federation configurations of the OpenStack Identity service (keystone). An authenticated federated user could request permissions to a project and uninten
Medium
CVE-2017-8032
Cloud Foundry UAA Identity Zone Admin Privilege Escalation
Critical
CVE-2016-6637
Cloud Foundry vulnerable to Cross-Site Request Forgery
High
CVE-2017-4991
Cloud Foundry UAA password reset vulnerability
Medium
CVE-2017-4974
Blind SQL Injection with privileged Cloud Foundry UAA endpoints
Critical
CVE-2017-4992
Cloud Foundry UAA privilege escalation with user invitations
High
CVE-2017-4973
Cloud Foundry UAA Privilege Escalation
High
CVE-2017-4960
Cloud Foundry denial of service vulnerability
High
CVE-2016-3084
Cloud Foundry UAA reset password vulnerable to brute force attack
High
CVE-2015-5349
Apache Directory Studio Command Injection
High
CVE-2018-0875
.NET Core Denial of Service Vulnerability
Medium
CVE-2012-2098
Uncontrolled Resource Consumption in Apache Commons Compress
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.