Medium
CVE-2017-6973
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2017-7241
MantisBT XSS via move_attachments_page.php
Medium
CVE-2017-7309
MantisBT vulnerable to XSS through config_option parameter in adm_config_report.php
High
CVE-2017-7683
Apache OpenMeetings displays Tomcat version and detailed error stack trace
High
CVE-2017-7681
Apache OpenMeetings vulnerable to SQL injection
High
CVE-2017-7666
Apache OpenMeetings vulnerable to Cross-Site Request Forgery
Critical
CVE-2017-7664
Apache OpenMeetings does not correctly validate uploaded XML documents
Medium
CVE-2017-7663
Apache OpenMeetings Cross-site Scripting vulnerability
Medium
CVE-2017-11128
Bolt stored Cross-site Scripting (XSS)
Medium
CVE-2017-11127
Bolt CMS Stored XSS
Medium
CVE-2017-2642
Moodle User fullname disclosure on user preferences page
High
CVE-2017-1000067
MODX Revolution blind SQL injection
Critical
CVE-2016-6798
XML External Entity Reference in Apache Sling
Medium
CVE-2017-11516
Yii Cross-site Scripting Framework vulnerability
Critical
CVE-2017-9785
Deserialization of Untrusted Data in NancyFX Nancy
High
CVE-2017-1000016
phpMyAdmin Cookie attribute injection attack
Critical
CVE-2017-1000362
Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
High
CVE-2016-8741
Exposure of Sensitive Information to an Unauthorized Actor in Apache Qpid Broker for Java
Medium
CVE-2015-8796
Apache Solr Cross-site scripting Vulnerability
High
CVE-2010-1632
Improper Input Validation in Apache Axis2
High
CVE-2017-1000007
txAWS (all current versions) fail to perform complete certificate verification resulting in vulnerability to MitM attacks and information disclosure.
High
CVE-2017-11675
Authenticated RCE in Zen Cart 1.5.5e
High
CVE-2015-3198
The Undertow module of WildFly allows source code disclosure
High
CVE-2008-4793
Drupal Node Validation Bypass in the node module API
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.