Mittel
CVE-2012-3428
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 71.687
Mittel
CVE-2012-5368
phpMyAdmin Unsafe Fetching of Javascript Code
Niedrig
CVE-2012-5339
phpMyAdmin multiple cross-site scripting vulnerabilities
Mittel
CVE-2012-4418
Apache Axis2 Vulnerable to XML Signature wrapping attack
Mittel
CVE-2011-4314
OpenID4Java does not verify that Attribute Exchange (AX) information is signed
Mittel
CVE-2012-6531
Zend Framework XEE Vulnerability
Mittel
CVE-2012-4446
Improper Authentication in Apache Qpid
Mittel
CVE-2012-0878
Paste Script has improper group memberships permissions
Niedrig
CVE-2012-4345
phpMyAdmin Multiple Cross-site Scripting Vulnerabilities in the Database Structure page
Kritisch
CVE-2012-3442
The (1) django.http.HttpResponseRedirect and (2) django.http.HttpResponsePermanentRedirect classes in Django before 1.3.2 and 1.4.x before 1.4.1 do not validate the scheme of a redirect target, which
Hoch
CVE-2012-3443
The django.forms.ImageField class in the form system in Django before 1.3.2 and 1.4.x before 1.4.1 completely decompresses image data during image validation, which allows remote attackers to cause a
Hoch
CVE-2012-3444
The get_image_dimensions function in the image-handling functionality in Django before 1.3.2 and 1.4.x before 1.4.1 uses a constant chunk size in all attempts to determine dimensions, which allows rem
Mittel
CVE-2012-4404
security/__init__.py in MoinMoin 1.9 through 1.9.4 does not properly handle group names that contain virtual group names such as "All," "Known," or "Trusted," which allows remote authenticated users w
Mittel
CVE-2012-5657
Zend Framework XXE Vulnerability
Mittel
CVE-2012-6532
Zend Framework XEE Vulnerability
Hoch
CVE-2012-4520
The django.http.HttpRequest.get_host function in Django 1.3.x before 1.3.4 and 1.4.x before 1.4.2 allows remote attackers to generate and display arbitrary URLs via crafted username and password Host
Hoch
CVE-2013-1842
TYPO3 SQL injection vulnerability in the Extbase Framework
Mittel
CVE-2013-1843
TYPO3 Open redirect vulnerability in the Access tracking mechanism
Mittel
CVE-2013-1814
Apache Rave information disclosure vulnerability
Mittel
CVE-2013-4729
phpMyAdmin Global variables scope injection vulnerability
Mittel
CVE-2013-3300
Lift Sensitive Information Disclosure
Hoch
CVE-2012-4399
CakePHPallows remote attackers to read arbitrary files via XML data containing external entity references
Mittel
CVE-2013-4997
phpMyAdmin Multiple cross-site scripting (XSS) vulnerabilities
Niedrig
CVE-2013-4600
Alkacon OpenCMS XSS via title and requestedResource parameters
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.