High
CVE-2010-4879
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2010-2491
Cross-site scripting (XSS) vulnerability in cgi/client.py in Roundup before 1.4.14 allows remote attackers to inject arbitrary web script or HTML via the template argument to the /issue program.
High
CVE-2010-3714
TYPO3 Remote File Disclosure vulnerability in the jumpUrl mechanism
Medium
CVE-2012-2138
Apache Sling POST Servlets Denial of Service Vulnerability
Low
CVE-2012-4579
phpMyAdmin Multiple XSS Vulnerabilities
High
CVE-2012-2146
Elixir 0.8.0 uses Blowfish in CFB mode without constructing a unique initialization vector (IV), which makes it easier for context-dependent users to obtain sensitive information and decrypt the datab
High
CVE-2012-2966
Caucho Quercus, as distributed in Resin, overwrites entries in SERVER superglobal array on basis of POST parameters
High
CVE-2012-2967
Caucho Quercus, as distributed in Resin, does not properly implement the `==` operator for comparisons
High
CVE-2012-2965
Caucho Quercus, as distributed in Resin, does not properly handle unspecified characters in the names of variables
High
CVE-2012-2374
CRLF injection vulnerability in the tornado.web.RequestHandler.set_header function in Tornado before 2.2.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting
Medium
CVE-2012-1607
TYPO3 allows remote attackers to obtain the database name via a direct request
Medium
CVE-2012-1608
Typo3 API XSS Vulnerabilities
Low
CVE-2012-1606
Typo3 Backend XSS Vulnerabilities
Medium
CVE-2012-1605
Typo3 Extbase Framework Unsafe Deserialization
Medium
CVE-2012-3458
Beaker before 1.6.4, when using PyCrypto to encrypt sessions, uses AES in ECB cipher mode, which might allow remote attackers to obtain portions of sensitive session data via unspecified vectors.
Medium
CVE-2012-4968
Silverstripe XSS Vulnerabilities
Medium
CVE-2011-4962
Silverstripe CMS Arbitrary Code Execution
High
CVE-2012-1618
Unescaped parameters in the PostgreSQL JDBC driver
High
CVE-2011-4932
ImpressPages CMS eval injection vulnerability
Low
CVE-2011-1940
phpMyAdmin Vulnerable to Cross-Site Scripting
Medium
CVE-2012-3446
Apache Libcloud before 0.11.1 uses an incorrect regular expression during verification of whether the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of
Low
CVE-2011-4634
phpMyAdmin vulnerable to Cross-site Scripting
Medium
CVE-2012-1154
Improper Access Control in JBoss mod_cluster
High
CVE-2012-1826
dotCMS allows remote authenticated users to execute arbitrary Java code
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.