Medium
CVE-2013-0306
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,737
Low
CVE-2013-0248
Incorrect Default Permissions in Apache Commons FileUpload
Medium
CVE-2013-0239
Improper Authentication in Apache CXF
Low
CVE-2013-0158
Jenkins allows attackers to obtain the master cryptographic key
Medium
CVE-2013-7489
The Beaker library through 1.11.0 for Python is affected by deserialization of untrusted data, which could lead to arbitrary code execution.
Medium
CVE-2013-4791
PrestaShop Stored Cross-Site Scripting Vulnerability
High
CVE-2013-0294
packet.py in pyrad before 2.1 uses weak random numbers to generate RADIUS authenticators and hash passwords, which makes it easier for remote attackers to obtain sensitive information via a brute forc
Medium
CVE-2013-6430
Improper Neutralization of Input During Web Page Generation in Spring Framework
Medium
CVE-2013-7062
Multiple cross-site scripting (XSS) vulnerabilities in Zope, as used in Plone 3.3.x through 3.3.6, 4.0.x through 4.0.9, 4.1.x through 4.1.6, 4.2.x through 4.2.7, and 4.3 through 4.3.2, allow remote at
Medium
CVE-2013-4752
Symfony Host Header Injection vulnerability in the HttpFoundation component
Medium
CVE-2013-7371
Node Connect Reflected Cross-Site Scripting in Sencha Labs Connect middleware
Medium
CVE-2013-0342
The CreateID function in packet.py in pyrad before 2.1 uses sequential packet IDs, which makes it easier for remote attackers to spoof packets by predicting the next ID, a different vulnerability than
Critical
CVE-2013-4409
ReviewBoard and Djblets library are vulnerable to code execution
High
CVE-2013-4251
The scipy.weave component in SciPy before 0.12.1 creates insecure temporary directories.
High
CVE-2013-4751
Symfony collectionCascaded and collectionCascadedDeeply fields security bypass
Medium
CVE-2013-2255
OpenStack Keystone and other components vulnerable to Improper Certificate Validation
Medium
CVE-2022-1571
Cross-site Scripting in FacturaScripts
Medium
CVE-2022-1555
Microweber vulnerable to cross-site scripting (XSS)
Critical
CVE-2022-28111
MyBatis PageHelper vulnerable to time-blind SQL injection via orderBy parameter
Medium
CVE-2022-28508
MantisBT vulnerable to XSS via unescaped output in browser_search_plugin.php
Medium
CVE-2022-1584
Cross-site Scripting in Microweber
Medium
CVE-2022-30241
Cross-site Scripting in jquery.json-viewer
High
CVE-2022-24901
Authentication bypass and denial of service (DoS) vulnerabilities in Apple Game Center auth adapter
Unrated
drupal-contrib-2022-038
drupal/quick_node_clone - SA-CONTRIB-2022-038
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.