High
CVE-2006-5878
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,690
Medium
CVE-2006-5031
CakePHP directory traversal vulnerability allows remote attackers to read arbitrary files
Medium
CVE-2006-4936
Moodle does not properly validate module instance id
Medium
CVE-2006-4067
Cross-site scripting (XSS) vulnerability in CakePHP
Medium
CVE-2006-3935
Alkacon OpenCMS Improper Access Control via system/workplace/views/admin/admin-main.jsp
Medium
CVE-2006-3936
Alkacon OpenCms Exposes JSP Source Code
Medium
CVE-2006-3934
Alkacon OpenCMS Absolute Path Traversal via pathname in filePath parameter
Low
CVE-2006-3933
Alkacon OpenCms XSS via unsanitized message body
Medium
CVE-2006-3835
Apache Tomcat Reveals Directories
High
CVE-2006-3695
Trac before 0.9.6 does not disable the "raw" or "include" commands when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows remote attackers t
Medium
CVE-2006-3360
phpSysInfo allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) sequence
Medium
CVE-2006-2759
Improper Input Validation in Mortbay Jetty
Medium
CVE-2006-2758
Jetty Directory Traversal Vulnerability
Low
CVE-2006-2571
Alkacon OpenCms XSS via query parameter in a search action
High
Exploited in attacks
CVE-2006-1547
Improper Input Validation in Apache Struts
Low
CVE-2006-1548
Cross-site scripting in Apache Struts
High
CVE-2006-1546
Apache Struts vulnerable to Improper Input Validation
Critical
CVE-2006-0931
PEAR::Archive_Tar Directory Traversal vulnerability
High
CVE-2006-0868
PEAR::Auth potential authentication bypass vulnerability
High
CVE-2006-0847
Directory traversal vulnerability in the staticfilter component in CherryPy before 2.1.1 allows remote attackers to read arbitrary files via ".." sequences in unspecified vectors.
Medium
CVE-2006-0743
Apache log4net format string vulnerability causes DoS
Medium
CVE-2006-0254
Apache Geronimo console 1.0 vulnerable to cross-site scripting
High
CVE-2005-4875
TYPO3 Reveals Sensitive Information via Direct Request to `misc/phpcheck/`
Medium
CVE-2005-4849
Apache Derby exposes user and password attributes
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.