CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 22/11/2019 |
| CVE-2018-10854 | 中危5.4 | cloudforms version, cloudforms 5.8 and cloudforms 5.9, is vulnerable to a cross-site-scripting. A flaw was found in CloudForms's v2v infrastructure mapping delete feature. A stored cross-site scripting due to improper sanitization of user input in Name field. | 22/11/2019 |
| CVE-2014-3700 | 严重9.8 | eDeploy through at least 2014-10-14 has remote code execution due to eval() of untrusted data | 21/11/2019 |
| CVE-2014-0084 | 中危5.5 | Ruby gem openshift-origin-node before 2014-02-14 does not contain a cronjob timeout which could result in a denial of service in cron.daily and cron.weekly. | 21/11/2019 |
| CVE-2012-6136 | 中危5.5 | tuned 2.10.0 creates its PID file with insecure permissions which allows local users to kill arbitrary processes. | 20/11/2019 |
| CVE-2012-6135 | 高危7.5 | RubyGems passenger 4.0.0 betas 1 and 2 allows remote attackers to delete arbitrary files during the startup process. | 19/11/2019 |
| CVE-2019-10172 | 高危7.5 | A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities similar CVE-2016-3720 also affects codehaus jackson-mapper-asl libraries but in different classes. | 18/11/2019 |
| CVE-2018-12207 | 中危6.5 | Improper invalidation for page table updates by a virtual guest operating system for multiple Intel(R) Processors may allow an authenticated user to potentially enable denial of service of the host system via local access. | 14/11/2019 |
| CVE-2019-11135 | 中危6.5 | TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. | 14/11/2019 |
| CVE-2019-14818 | 高危7.5 | A flaw was found in all dpdk version 17.x.x before 17.11.8, 16.x.x before 16.11.10, 18.x.x before 18.11.4 and 19.x.x before 19.08.1 where a malicious master, or a container with access to vhost_user socket, can send specially crafted VRING_SET_NUM messages, resulting in a memory leak including file descriptors. This fl | 14/11/2019 |
| CVE-2014-8167 | 中危5.9 | vdsm and vdsclient does not validate certficate hostname from another vdsm which could facilitate a man-in-the-middle attack | 13/11/2019 |
| CVE-2014-3655 | 中危4.3 | JBoss KeyCloak is vulnerable to soft token deletion via CSRF | 13/11/2019 |
| CVE-2014-3592 | 中危6.1 | OpenShift Origin: Improperly validated team names could allow stored XSS attacks | 13/11/2019 |
| CVE-2010-3857 | 中危6.1 | JBoss BRMS before 5.1.0 has a XSS vulnerability via asset=UUID parameter. | 12/11/2019 |
| CVE-2014-3599 | 中危6.5 | HornetQ REST is vulnerable to XML External Entity due to insecure configuration of RestEasy | 12/11/2019 |
| CVE-2019-14860 | 中危6.5 | It was found that the Syndesis configuration for Cross-Origin Resource Sharing was set to allow all origins. An attacker could use this lack of protection to conduct phishing attacks and further access unauthorized information. | 08/11/2019 |
| CVE-2019-10222 | 高危7.5 | A flaw was found in the Ceph RGW configuration with Beast as the front end handling client requests. An unauthenticated attacker could crash the Ceph RGW server by sending valid HTTP headers and terminating the connection, resulting in a remote denial of service for Ceph RGW clients. | 08/11/2019 |
| CVE-2019-10219 | 中危6.1 | A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack. | 08/11/2019 |