High
CVE-2016-5362
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2014-3517
OpenStack Compute (Nova) Exposure of Sensitive Information to an Unauthorized Actor vulnerability
Medium
CVE-2015-3280
OpenStack Compute (nova) allows remote authenticated users to cause a denial of service
Medium
CVE-2013-6437
OpenStack Nova DoS through ephemeral disk backing files
Low
CVE-2013-7048
OpenStack Nova live snapshots use an insecure local directory
Medium
CVE-2015-8749
OpenStack Nova Potential Xen connection password leak via StorageError
Medium
CVE-2014-3608
OpenStack Compute (Nova)'s VMWare driver vulnerable to denial of service
Medium
CVE-2013-2256
OpenStack Compute (Nova) allows remote authenticated users to obtain sensitive information
Medium
CVE-2015-7713
OpenStack Compute (Nova) allows remote attackers to bypass intended restriction
Medium
CVE-2013-4202
OpenStack Cinder Denial of Service using XML entities
Medium
CVE-2012-4457
OpenStack Keystone Token authorization for a user in a disabled tenant is allowed
High
CVE-2012-4456
OpenStack Keystone Improper Authentication vulnerability
Medium
CVE-2016-2140
OpenStack Nova host data access through resize/migration
Medium
CVE-2014-3708
OpenStack Compute (Nova) Denial of Service vulnerability
Medium
CVE-2015-3241
OpenStack Nova instance migration process does not stop when instance is deleted
Low
CVE-2014-7231
OpenStack Oslo utility sensitive information exposure via log files
Medium
CVE-2015-0259
OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity
High
CVE-2018-12423
Matrix Synapse Authorization Error
High
CVE-2018-16515
Matrix Synapse Improper Signature Validation
Medium
CVE-2017-1000426
MapProxy vulnerable to cross-site scripting in demo service
High
CVE-2017-15112
keycloak-httpd-client-install Insecure Secrets
Medium
CVE-2014-8333
OpenStack Nova VMware instance leak potentially leading to compute DoS
Medium
CVE-2015-1195
OpenStack Glance v2 API unrestricted path traversal through filesystem:// scheme
Medium
CVE-2017-15111
keycloak-httpd-client-install symlink attack vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.