CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 22/11/2019 |
| CVE-2018-10854 | MITTEL5.4 | cloudforms version, cloudforms 5.8 and cloudforms 5.9, is vulnerable to a cross-site-scripting. A flaw was found in CloudForms's v2v infrastructure mapping delete feature. A stored cross-site scripting due to improper sanitization of user input in Name field. | 22/11/2019 |
| CVE-2014-3700 | KRITISCH9.8 | eDeploy through at least 2014-10-14 has remote code execution due to eval() of untrusted data | 21/11/2019 |
| CVE-2014-0084 | MITTEL5.5 | Ruby gem openshift-origin-node before 2014-02-14 does not contain a cronjob timeout which could result in a denial of service in cron.daily and cron.weekly. | 21/11/2019 |
| CVE-2012-6136 | MITTEL5.5 | tuned 2.10.0 creates its PID file with insecure permissions which allows local users to kill arbitrary processes. | 20/11/2019 |
| CVE-2012-6135 | HOCH7.5 | RubyGems passenger 4.0.0 betas 1 and 2 allows remote attackers to delete arbitrary files during the startup process. | 19/11/2019 |
| CVE-2019-10172 | HOCH7.5 | A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities similar CVE-2016-3720 also affects codehaus jackson-mapper-asl libraries but in different classes. | 18/11/2019 |
| CVE-2018-12207 | MITTEL6.5 | Improper invalidation for page table updates by a virtual guest operating system for multiple Intel(R) Processors may allow an authenticated user to potentially enable denial of service of the host system via local access. | 14/11/2019 |
| CVE-2019-11135 | MITTEL6.5 | TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. | 14/11/2019 |
| CVE-2019-14818 | HOCH7.5 | A flaw was found in all dpdk version 17.x.x before 17.11.8, 16.x.x before 16.11.10, 18.x.x before 18.11.4 and 19.x.x before 19.08.1 where a malicious master, or a container with access to vhost_user socket, can send specially crafted VRING_SET_NUM messages, resulting in a memory leak including file descriptors. This fl | 14/11/2019 |
| CVE-2014-8167 | MITTEL5.9 | vdsm and vdsclient does not validate certficate hostname from another vdsm which could facilitate a man-in-the-middle attack | 13/11/2019 |
| CVE-2014-3655 | MITTEL4.3 | JBoss KeyCloak is vulnerable to soft token deletion via CSRF | 13/11/2019 |
| CVE-2014-3592 | MITTEL6.1 | OpenShift Origin: Improperly validated team names could allow stored XSS attacks | 13/11/2019 |
| CVE-2010-3857 | MITTEL6.1 | JBoss BRMS before 5.1.0 has a XSS vulnerability via asset=UUID parameter. | 12/11/2019 |
| CVE-2014-3599 | MITTEL6.5 | HornetQ REST is vulnerable to XML External Entity due to insecure configuration of RestEasy | 12/11/2019 |
| CVE-2019-14860 | MITTEL6.5 | It was found that the Syndesis configuration for Cross-Origin Resource Sharing was set to allow all origins. An attacker could use this lack of protection to conduct phishing attacks and further access unauthorized information. | 08/11/2019 |
| CVE-2019-10222 | HOCH7.5 | A flaw was found in the Ceph RGW configuration with Beast as the front end handling client requests. An unauthenticated attacker could crash the Ceph RGW server by sending valid HTTP headers and terminating the connection, resulting in a remote denial of service for Ceph RGW clients. | 08/11/2019 |
| CVE-2019-10219 | MITTEL6.1 | A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack. | 08/11/2019 |