High
CVE-2016-1927
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
High
CVE-2016-2048
Django 1.9.x before 1.9.2, when ModelAdmin.save_as is set to True, allows remote authenticated users to bypass intended access restrictions and create ModelAdmin objects via the "Save as New" option w
Medium
CVE-2016-2162
Apache Struts XSS Vulnerability
Medium
CVE-2016-3093
Denial of service in Apache Struts
Critical
CVE-2016-3082
Remote Code Execution in Apache Struts
Medium
CVE-2016-6212
Drupal Views can allow unauthorized users to see Statistics information
High
CVE-2016-6211
Drupal Saving user accounts can sometimes grant the user all roles
Medium
CVE-2016-6298
The _Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in jwcrypto before 0.3.2 lacks the Random Filling protection mechanism, which makes it easier for remote attackers to obtain cleartex
Medium
CVE-2016-9452
Drupal Denial of service via transliterate mechanism
High
CVE-2016-9187
Moodle Unrestricted file upload vulnerability
High
CVE-2016-9450
Drupal Incorrect cache context on password reset page
Medium
CVE-2016-9188
Moodle XSS Vulnerability
Medium
CVE-2015-1796
Improper Certificate Validation in Shibboleth Identity Provider and OpenSAML
High
CVE-2016-5393
Improper Access Control in Apache Hadoop
High
CVE-2015-2171
Slim vulnerable to PHP object injection
Medium
CVE-2015-2241
Cross-site scripting (XSS) vulnerability in the contents function in admin/helpers.py in Django before 1.7.6 and 1.8 before 1.8b2 allows remote attackers to inject arbitrary web script or HTML via a m
Medium
CVE-2015-2308
Symfony Vulnerable to PHP Eval Injection
Low
CVE-2015-3010
ceph-deploy before 1.5.23 uses weak permissions (644) for ceph/ceph.client.admin.keyring, which allows local users to obtain sensitive information by reading the file.
Medium
CVE-2016-2559
phpMyAdmin Cross-site scripting (XSS) vulnerability in SQL parser
Medium
CVE-2016-2562
phpMyAdmin Improper Input Validation
Medium
CVE-2015-3397
Yii Framework Cross-site Scripting Vulnerability
Medium
CVE-2015-3935
Dolibarr ERP and CRM contain Cross-site Scripting Vulnerability
Medium
CVE-2015-3982
The session.flush function in the cached_db backend in Django 1.8.x before 1.8.2 does not properly flush the session, which allows remote attackers to hijack user sessions via an empty string in the s
Low
CVE-2015-3989
concrete5 vulnerable to Cross-site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.