Medium
CVE-2016-3170
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
High
CVE-2015-5303
The TripleO Heat templates (tripleo-heat-templates), when deployed via the commandline interface, allow remote attackers to spoof OpenStack Networking metadata requests by leveraging knowledge of the
High
CVE-2016-3163
Drupal Brute force amplification attacks via XML-RPC
High
CVE-2016-0735
Apache Ranger Access Restriction Bypass
High
CVE-2016-3167
Drupal Open redirect vulnerability in the drupal_goto function
Medium
CVE-2016-0711
Apache Jetspeed vulnerable to Cross-site Scripting
High
CVE-2016-0710
Apache Jetspeed vulnerable to SQL Injection
High
CVE-2016-0709
Path Traversal in Apache Jetspeed
Medium
CVE-2014-6276
schema.py in Roundup before 1.5.1 does not properly limit attributes included in default user permissions, which might allow remote authenticated users to obtain sensitive user information by viewing
Medium
CVE-2016-0712
Cross-site Scripting in Apache Jetspeed
High
CVE-2015-5271
The TripleO Heat templates (tripleo-heat-templates) do not properly order the Identity Service (keystone) before the OpenStack Object Storage (Swift) staticweb middleware in the swiftproxy pipeline wh
High
CVE-2016-3162
Drupal File upload access bypass and denial of service
Low
CVE-2013-5679
Missing Cryptographic Step in OWASP Enterprise Security API for Java
High
CVE-2016-3171
Drupal arbitrary code execution
High
CVE-2016-4423
Symphony Denial of Service Via Overlong Usernames
High
CVE-2016-1902
Symfony Cryptographic Vulnerability
Low
CVE-2011-4344
Jenkins allows Cross-Site Scripting (XSS)
Medium
CVE-2014-2060
Jenkins allows Remote Attackers to Hijack Sessions
Medium
CVE-2013-7330
Jenkins allows attackers to configure restricted projects
Medium
CVE-2014-2058
Jenkins allows attackers to execute arbitrary jobs
Medium
CVE-2014-2063
Jenkins Vulnerable to Clickjacking
Medium
CVE-2014-2062
Jenkins does not invalidate the API token when a user is deleted
Medium
CVE-2014-2061
Jenkin allows attackers to obtain passwords by reading the HTML source code
Medium
CVE-2014-2064
Jenkins allows attackers to determine whether a user exists
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.