Medium
CVE-2012-4387
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Critical
CVE-2012-4406
OpenStack Object Storage (swift) Code Injection vulnerability
High
CVE-2012-5563
OpenStack Keystone, as used in OpenStack Folsom 2012.2, does not properly implement token expiration, which allows remote authenticated users to bypass intended authorization restrictions by creating
Medium
CVE-2012-5785
Apache Axis2 has Improper Input Validation
High
CVE-2012-5817
Improper Input Validation in XFire
Medium
CVE-2012-5825
Tweepy does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to sp
Medium
CVE-2012-5886
Improper Authentication in Apache Tomcat
Medium
CVE-2012-5887
Improper Authentication in Apache Tomcat
Low
CVE-2012-5888
Basic SEO Features (seo_basics) extension TYPO3 vulnerable to Cross-site Scripting
Medium
CVE-2012-5881
Cross-site scripting in yui 2.4.0
Low
CVE-2012-5889
powermail extension for TYPO3 has Cross-site Scripting vulnerability
Medium
CVE-2012-5890
Front End User Registration (sr_feuser_register) extension for TYPO3 allows remote attackers to obtain user names, passwords
Medium
CVE-2012-6131
Cross-site scripting (XSS) vulnerability in cgi/client.py in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via the @action parameter to support/issue1.
Medium
CVE-2012-6132
Cross-site scripting (XSS) vulnerability in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via the otk parameter.
Medium
CVE-2012-6130
Cross-site scripting (XSS) vulnerability in the history display in Roundup before 1.4.20 allows remote attackers to inject arbitrary web script or HTML via a username, related to generating a link.
Low
CVE-2012-6148
Typo3 Function Menu API XSS Vulnerability
Medium
CVE-2012-6144
Typo3 Backend History Module Vulnerable to SQL Injection
Low
CVE-2012-6147
Typo3 Backend API XSS Vulnerability
Low
CVE-2012-6145
Typo3 Backend History Module Vulnerable to XSS
High
CVE-2013-1348
Symphony Vulnerable to PHP Code Injection via YAML Parsing
High
CVE-2013-1397
Symfony Arbitrary PHP code Execution
Medium
CVE-2013-1879
Improper Neutralization of Input During Web Page Generation in Apache ActiveMQ
Low
CVE-2013-1840
The v1 API in OpenStack Glance Essex (2012.1), Folsom (2012.2), and Grizzly, when using the single-tenant Swift or S3 store, reports the location field, which allows remote authenticated users to obta
Medium
CVE-2013-2254
Improper Restriction of Operations within the Bounds of a Memory Buffer in Apache Sling
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.