Medium
CVE-2022-33146
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,445
Medium
CVE-2019-11340
Matrix Sydent mishandles emails
High
CVE-2019-13594
Mirumee Saleor CSRF Protection Disabled
High
CVE-2020-35459
ClusterLabs crmsh vulnerable to shell code injection
Medium
CVE-2020-15703
aptdaemon Information Disclosure via Improper Input Validation in Transaction class
High
CVE-2021-38155
OpenStack Keystone allows information disclosure during account locking
High
CVE-2019-14322
Pallets Werkzeug vulnerable to Path Traversal
Medium
CVE-2019-13628
wolfCrypt leaks cryptographic information via timing side channel
Medium
CVE-2019-10047
PyDio Stored XSS Vulnerability
Low
CVE-2015-9543
OpenStack Nova can leak consoleauth token into log files
Medium
CVE-2011-2185
Fabric vulnerable to symlink attack on tmp files
Medium
CVE-2013-1665
XML External Entity (XXE) in Django
Medium
CVE-2013-1664
XML Entity Expansion (XEE) in Django
High
CVE-2010-2235
Cobbler is vulnerable to code injection
High
CVE-2012-2395
Cobbler subject to Command Injection
High
CVE-2011-3587
Zope Command Execution Vulnerability
Low
CVE-2013-4278
OpenStack Compute (Nova) Resource limit circumvention in Nova private flavors
Medium
CVE-2011-1340
Plone XSS Vulnerability
High
CVE-2011-4030
Plone anonymous access to sub-objects in CMFEditions where KwAsAttributes classes were publishable
Medium
CVE-2014-0056
OpenStack Neutron Improper Authentication vulnerability
Medium
CVE-2014-0162
OpenStack Image Registry and Delivery Service (Glance) Improper Input Validation vulnerability
Medium
CVE-2013-4155
OpenStack Swift allows authenticated users to cause a denial of service
Medium
CVE-2014-3242
SOAPpy vulnerable to XML External Entity attacks
Medium
CVE-2013-2209
Review Board Cross-site scripting (XSS) vulnerability in the reviews dropdown
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.