Medium
CVE-2014-3941
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Low
CVE-2014-3943
Typo3 XSS Vulnerabilities
High
CVE-2014-3942
TYPO3 Color Picker Wizard component allows remote authenticated editors to execute arbitrary PHP code
Medium
CVE-2014-3604
Improper Validation of Certificate with Host Mismatch in Not Yet Commons SSL
High
CVE-2014-3530
XML External Entity Reference in org.picketlink:picketlink-common
High
CVE-2015-5162
OpenStack Cinder, Glance, and Nova contain Uncontrolled Resource Consumption
Medium
CVE-2016-0789
Jenkins has CRLF Injection Vulnerability in the CLI
Critical
CVE-2016-0788
Jenkins allows Execution of Code by Opening a JRMP Listener
Medium
CVE-2016-0790
Exposure of Sensitive Information in Jenkins Core
High
CVE-2016-0792
Jenkins allows Deserialization of Untrusted Data via an XML File
Critical
CVE-2016-0791
Exposure of Sensitive Information in Jenkins Core
Medium
CVE-2016-3721
Jenkins allows Remote Users to Inject Build Parameters
Medium
CVE-2016-3723
Exposure of Sensitive Information in Jenkins Core
Medium
CVE-2016-3724
Jenkins Exposes Sensitive Information from Job Configuration
High
CVE-2016-3726
Jenkins affected by Open Redirect Vulnerability
Medium
CVE-2016-3725
Missing permissions check in Jenkins Core
Medium
CVE-2016-3722
Incorrect Authorization in Jenkins Core
Medium
CVE-2016-3727
Jenkins Exposes Sensitive Information via API URL
High
CVE-2016-7401
The cookie parsing code in Django before 1.8.15 and 1.9.x before 1.9.10, when used on a site with Google Analytics, allows remote attackers to bypass an intended CSRF protection mechanism by setting a
Critical
CVE-2016-8638
Session Fixation in ipsilon
Critical
CVE-2017-7214
OpenStack Nova logs sensitive context from notification exceptions
High
CVE-2017-15700
Apache Sling Authentication Service vulnerability
Medium
CVE-2017-12630
Apache Drill vulnerable to Cross-site Scripting
Medium
CVE-2011-4858
Improper Input Validation in Apache Tomcat
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.