Top technology
Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6673
Adobe 6383
Ibm 6286
Cisco 5751
Debian 3919
Mozilla 2886
Apache 2864
Redhat 2586
Nexus Repository Manager
CRITICAL 9.8
CVE-2017-17717
Sonatype Nexus Repository Manager through 2.14.5 has weak password encryption with a hardcoded CMMDwoV value in the LDAP integration feature.
Fix: after 2.14.5
Fix from $2,300
2017-12-17
Nexus
HIGH 7.5
CVE-2014-9389
Directory traversal vulnerability in Sonatype Nexus OSS and Pro before 2.11.1-01 allows remote attackers to read or write to arbitrary files via unsp…
Fix: after 2.11.0
Fix from $1,950
2015-01-05
Nexus
HIGH 7.5
CVE-2014-2034
Unspecified vulnerability in Sonatype Nexus OSS and Pro 2.4.0 through 2.7.1 allows attackers to create arbitrary user accounts via unknown vectors re…
Mitigation only
Fix from $1,950
2014-04-01
Nexus
HIGH 7.5
CVE-2014-0792
Sonatype Nexus 1.x and 2.x before 2.7.1 allows remote attackers to create arbitrary objects and execute arbitrary code via unspecified vectors relate…
Patch available
Fix from $1,950
2014-01-17