Medium
CVE-2014-9527
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
High
CVE-2016-1000001
flask-oidc version 0.1.2 and earlier is vulnerable to an open redirect
Medium
CVE-2016-7111
MantisBT XSS through weak CSP when using Gravatar plugin
Critical
CVE-2016-5100
Froxlor guessable password reset token
Medium
CVE-2016-4041
Plone 4.0 through 5.1a1 does not have security declarations for Dexterity content-related WebDAV requests, which allows remote attackers to gain webdav access via unspecified vectors.
Medium
CVE-2016-4042
Plone 3.3 through 5.1a1 allows remote attackers to obtain information about the ID of sensitive content via unspecified vectors.
High
CVE-2016-3102
Jenkins Script Security Plugin allows for Bypass of Groovy Sandbox Protection
Medium
CVE-2016-4043
Chameleon (five.pt) in Plone 5.0rc1 through 5.1a1 allows remote authenticated users to bypass Restricted Python by leveraging permissions to create or edit templates.
Medium
CVE-2017-5605
XMPP Clients User Impersonation Vulnerability in Movim Moxl
Low
CVE-2015-8034
The state.sls function in Salt before 2015.8.3 uses weak permissions on the cache data, which allows local users to obtain sensitive information by reading the file.
High
CVE-2015-8814
Umbraco CMS vulnerable to CSRF
High
CVE-2015-8813
Umbraco CMS vulnerable to CSRF
Medium
CVE-2016-4947
Cloudera HUE Account Enumeration
Medium
CVE-2017-6589
EpicEditor XSS Vulnerability
Critical
CVE-2016-10131
CodeIgniter arbitrary code execution
Medium
CVE-2017-5537
The password reset form in Weblate before 2.10.1 provides different error messages depending on whether the email address is associated with an account, which allows remote attackers to enumerate user
Low
CVE-2013-2192
Improper Authentication in Apache Hadoop
Medium
CVE-2012-1574
Apache Hadoop allows impersonation of arbitrary cluster user accounts
High
CVE-2012-3376
Client BlockTokens not checked in Apache Hadoop
Medium
CVE-2017-7204
imdbphp Cross-Site Scripting (XSS)
Medium
CVE-2014-0229
Improper Authentication in Apache Hadoop
Medium
CVE-2015-8310
Cross-site scripting (XSS) vulnerability in Cherry Music before 0.36.0 allows remote authenticated users to inject arbitrary web script or HTML via the playlistname field when creating a new playlist.
Medium
CVE-2015-8309
Directory traversal vulnerability in Cherry Music before 0.36.0 allows remote authenticated users to read arbitrary files via the "value" parameter to "download."
Medium
CVE-2016-4976
Apache Ambari reveals administrator passwords
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.