Low
CVE-2012-6074
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Low
CVE-2012-6073
Jenkins affected by Open Redirect Vulnerability
Medium
CVE-2012-6072
Jenkins allows HTTP Injection and Response Splitting
High
CVE-2016-1866
Salt 2015.8.x before 2015.8.4 does not properly handle clear messages on the minion, which allows man-in-the-middle attackers to execute arbitrary code by inserting packets into the minion-master data
High
CVE-2013-4111
The Python client library for Glance (python-glanceclient) before 0.10.0 does not properly check the preverify_ok value, which prevents the server hostname from being verified with a domain name in th
High
CVE-2013-2191
python-bugzilla before 0.9.0 does not validate X.509 certificates, which allows man-in-the-middle attackers to spoof Bugzilla servers via a crafted certificate.
Medium
CVE-2014-6300
phpMyAdmin micro history Implementation XSS Vulnerability
High
CVE-2014-3730
The django.util.http.is_safe_url function in Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly validate URLs, which allows remote attackers to conduc
Medium
CVE-2014-0482
The contrib.auth.middleware.RemoteUserMiddleware middleware in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3, when using the contrib.auth.backends.Re
High
CVE-2014-0480
The core.urlresolvers.reverse function in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 does not properly validate URLs, which allows remote attacker
Medium
CVE-2014-0483
The administrative interface (contrib.admin) in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 does not check if a field represents a relationship bet
High
CVE-2016-5739
phpMyAdmin vulnerable to Cross-Site Request Forgery
Medium
CVE-2016-5733
phpMyAdmin vulnerable to Cross-site Scripting
Medium
CVE-2016-5705
phpMyAdmin vulnerable to Cross-site Scripting
Medium
CVE-2016-5701
phpMyAdmin vulnerable to Cross-site Scripting
Medium
CVE-2016-5731
phpMyAdmin Cross-site scripting (XSS) vulnerability
Medium
CVE-2016-5730
phpMyAdmin full path disclosure vulnerability
High
CVE-2016-5706
phpMyAdmin Denial Of Service (DOS) attack
High
CVE-2016-3630
The binary delta decoder in Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a (1) clone, (2) push, or (3) pull command, related to (a) a list sizing rounding error and (b)
High
CVE-2016-3069
Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted name when converting a Git repository.
High
CVE-2016-3068
Mercurial before 3.7.3 allows remote attackers to execute arbitrary code via a crafted git ext:: URL when cloning a subrepository.
High
CVE-2016-2041
phpMyAdmin Unsafe comparison of XSRF/CSRF token
Medium
CVE-2016-2040
phpMyAdmin XSS Vulnerability
High
CVE-2015-2316
The utils.html.strip_tags function in Django 1.6.x before 1.6.11, 1.7.x before 1.7.7, and 1.8.x before 1.8c1, when using certain versions of Python, allows remote attackers to cause a denial of servic
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.