Medium
CVE-2015-3880
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2017-3165
Cross-site Scripting In Apache Brooklyn
Medium
CVE-2015-3296
NodeBB Cross-site Scripting Vulnerability in Markdown Processing
Medium
CVE-2017-12157
Moodle sensitive information disclosure
Critical
CVE-2014-8684
CodeIgniter and Kohana vulnerable to PHP Object Injection
High
CVE-2016-8744
Deserialization of Untrusted Data in Apache Brooklyn
Medium
CVE-2017-14762
GeniXCMS Cross-site Scripting (XSS) via id parameter
Medium
CVE-2017-14765
GeniXCMS Cross-site Scripting (XSS) via the Menu ID field
High
CVE-2017-14764
GeniXCMS arbitrary PHP code execution
Medium
CVE-2017-14761
GeniXCMS Cross-site Scripting (XSS) vulnerability via id parameter
Medium
CVE-2015-5963
contrib.sessions.middleware.SessionMiddleware in Django 1.8.x before 1.8.4, 1.7.x before 1.7.10, 1.4.x before 1.4.22, and possibly other versions allows remote attackers to cause a denial of service (
Medium
CVE-2015-7316
Cross-site scripting (XSS) vulnerability in Plone 3.3.0 through 3.3.6, 4.0.0 through 4.0.10, 4.1.0 through 4.1.6, 4.2.0 through 4.2.7, 4.3.x before 4.3.7, and 5.0rc1.
Medium
CVE-2015-7315
Plone unauthorized member addition vulnerability
High
CVE-2015-7318
Plone 3.3.0 through 3.3.6 allows remote attackers to inject headers into HTTP responses.
Medium
CVE-2017-14920
eGroupware Community Edition Stored XSS vulnerability
High
CVE-2015-7293
Multiple cross-site request forgery (CSRF) vulnerabilities in Zope Management Interface 4.3.7 and earlier, and Plone before 5.x.
High
CVE-2017-5192
When using the local_batch client from salt-api in SaltStack Salt before 2015.8.13, 2016.3.x before 2016.3.5, and 2016.11.x before 2016.11.2, external authentication is not respected, enabling all aut
Medium
CVE-2017-9794
Apache Geode gfsh query vulnerability
Medium
CVE-2017-14775
Laravel Sensitive Data Exposure
Critical
CVE-2017-12621
Improper Restriction of XML External Entity Reference in Jelly
Medium
CVE-2014-0043
Apache Wicket allows attackers to check for third-party libraries
High
CVE-2017-1000093
Jenkins Poll SCM Plugin vulnerable to Cross-Site Request Forgery
Medium
CVE-2017-1000094
Jenkins Docker Commons Plugin allows any user with Overall/Read permission to get list of valid credentials IDs
High
CVE-2017-1000092
Cross-Site Request Forgery in Jenkins Git Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.