CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| CRÍTICO9.8 |
eDeploy has RCE via cPickle deserialization of untrusted data |
| 15/12/2019 |
| CVE-2014-3652 | MÉDIO6.1 | JBoss KeyCloak: Open redirect vulnerability via failure to validate the redirect URL. | 15/12/2019 |
| CVE-2014-3536 | MÉDIO5.5 | CFME (CloudForms Management Engine) 5: RHN account information is logged to top_output.log during registration | 15/12/2019 |
| CVE-2014-0241 | MÉDIO5.5 | rubygem-hammer_cli_foreman: File /etc/hammer/cli.modules.d/foreman.yml world readable | 13/12/2019 |
| CVE-2014-0197 | ALTO8.8 | CFME: CSRF protection vulnerability via permissive check of the referrer header | 13/12/2019 |
| CVE-2014-0175 | CRÍTICO9.8 | mcollective has a default password set at install | 13/12/2019 |
| CVE-2019-14849 | MÉDIO5.4 | A vulnerability was found in 3scale before version 2.6, did not set the HTTPOnly attribute on the user session cookie. An attacker could use this to conduct cross site scripting attacks and gain access to unauthorized information. | 12/12/2019 |
| CVE-2014-0163 | ALTO8.8 | Openshift has shell command injection flaws due to unsanitized data being passed into shell commands. | 11/12/2019 |
| CVE-2014-0026 | MÉDIO6.5 | katello-headpin is vulnerable to CSRF in REST API | 11/12/2019 |
| CVE-2013-7370 | MÉDIO6.1 | node-connect before 2.8.1 has XSS in the Sencha Labs Connect middleware | 11/12/2019 |
| CVE-2013-6495 | MÉDIO6.1 | JBossWeb Bayeux has reflected XSS | 11/12/2019 |
| CVE-2019-13734 | ALTO8.8 | Out of bounds write in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | 10/12/2019 |
| CVE-2013-2167 | CRÍTICO9.8 | python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache signing bypass | 10/12/2019 |
| CVE-2013-2166 | CRÍTICO9.8 | python-keystoneclient version 0.2.3 to 0.2.5 has middleware memcache encryption bypass | 10/12/2019 |
| CVE-2013-1793 | ALTO7.5 | openstack-utils openstack-db has insecure password creation | 10/12/2019 |
| CVE-2012-2148 | BAIXO3.3 | An issue exists in the property replacements feature in any descriptor in JBoxx AS 7.1.1 ignores java security policies | 06/12/2019 |
| CVE-2019-11255 | MÉDIO6.5 | Improper input validation in Kubernetes CSI sidecar containers for external-provisioner (<v0.4.3, <v1.0.2, v1.1, <v1.2.2, <v1.3.1), external-snapshotter (<v0.4.2, <v1.0.2, v1.1, <1.2.2), and external-resizer (v0.1, v0.2) could result in unauthorized PersistentVolume data access or volume mutation during snapshot, resto | 05/12/2019 |