Medium
CVE-2015-8234
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Critical
CVE-2016-6807
Apache Ambari Improper Access Control
High
CVE-2017-6952
Integer overflow in the cs_winkernel_malloc function in winkernel_mm.c in Capstone 3.0.4 and earlier allows attackers to cause a denial of service (heap-based buffer overflow in a kernel driver) or po
Medium
CVE-2017-7390
SocialNetwork Cross-Site Scripting (XSS) vulnerability
Medium
CVE-2017-7391
Magmi XSS Vulnerability
High
CVE-2016-10096
GeniXCMS SQL injection vulnerability
High
CVE-2015-1612
OpenFlow plugin for OpenDaylight LLDP Relay
High
CVE-2015-1611
OpenFlow plugin for OpenDaylight allows spoofing the SDN topology
High
CVE-2017-5649
Apache Geode information disclosure vulnerability
Medium
CVE-2016-6348
JacksonJsonpInterceptor susceptible to cross-site script inclusion (XSSI) attack
Medium
CVE-2015-1838
modules/serverdensity_device.py in SaltStack before 2014.7.4 does not properly handle files in /tmp.
Medium
CVE-2015-1839
modules/chef.py in SaltStack before 2014.7.4 does not properly handle files in /tmp.
Critical
CVE-2015-7564
TeamPass vulnerable to SQL Injection
Medium
CVE-2015-7562
TeamPass vulnerable to Cross-site Scripting
Medium
CVE-2016-6347
Improper Neutralization of Input During Web Page Generation in RESTEasy
Medium
CVE-2017-8052
Craft CMS XSS Vulnerability
High
CVE-2016-3076
Heap-based buffer overflow in the j2k_encode_entry function in Pillow 2.5.0 through 3.1.1 allows remote attackers to cause a denial of service (memory corruption) via a crafted Jpeg2000 file.
Medium
CVE-2017-8298
Canvs Canvas Cross-site Scripting (XSS) via title and content fields
High
CVE-2017-8109
The salt-ssh minion code in SaltStack Salt 2016.11 before 2016.11.4 copied over configuration from the Salt Master without adjusting permissions, which might leak credentials to local attackers on con
Medium
CVE-2017-7271
Yii Framework Reflected XSS
Medium
CVE-2017-8376
GeniXCMS Cross-site Scripting (XSS)
High
CVE-2017-8377
GeniXCMS SQL Injection
Medium
CVE-2017-8385
Craft CMS subject to URL forgery
Medium
CVE-2017-8384
Craft CMS XSS Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.