Hoch
CVE-2013-4435
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 71.690
Hoch
CVE-2013-3239
phpMyAdmin Remote Code Execution
Hoch
CVE-2013-4510
Tryton Directory Traversal vulnerability
Mittel
CVE-2013-6348
Apache Struts is vulnerable to Cross-site Scripting
Mittel
CVE-2013-1865
OpenStack Keystone Folsom (2012.2) does not properly perform revocation checks for Keystone PKI tokens when done through a server, which allows remote attackers to bypass intended access restrictions
Hoch
CVE-2012-3363
Zend Framework XXE Vulnerability
Hoch
CVE-2013-4314
The X509Extension in pyOpenSSL before 0.13.1 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle at
Hoch
CVE-2013-4315
Directory traversal vulnerability in Django 1.4.x before 1.4.7, 1.5.x before 1.5.3, and 1.6.x before 1.6 beta 3 allows remote attackers to read arbitrary files via a file path in the ALLOWED_INCLUDE_R
Mittel
CVE-2012-1589
Drupal Open Redirect
Mittel
CVE-2012-2153
Drupal improper access restrictions
Mittel
CVE-2012-6081
Multiple unrestricted file upload vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action/anywikidraw.py) actions in MoinMoin before 1.9.6 allow remote authenticated use
Mittel
CVE-2013-5676
Jenkins SonarQube Plugin Stores Passwords in Cleartext
Hoch
CVE-2013-6389
Drupal has open redirect vulnerability in the Overlay module
Mittel
CVE-2013-7075
TYPO3 vulnerable to Insecure Unserialize via Content Editing Wizards component
Mittel
CVE-2013-7081
TYPO3 Improper Access Control vulnerability
Mittel
CVE-2013-7080
TYPO3 is vulnerable to Mass Assignment in the Extension table administration library
Hoch
CVE-2013-2104
python-keystoneclient before 0.2.4, as used in OpenStack Keystone (Folsom), does not properly check expiry for PKI tokens, which allows remote authenticated users to (1) retain use of a token after it
Mittel
CVE-2014-0808
EC-CUBE vulnerable to authorization bypass
Hoch
CVE-2013-1443
The authentication framework (django.contrib.auth) in Django 1.4.x before 1.4.8, 1.5.x before 1.5.4, and 1.6.x before 1.6 beta 4 allows remote attackers to cause a denial of service (CPU consumption)
Hoch
CVE-2014-1202
Code injection via property expansion in SoapUI
Kritisch
CVE-2013-6396
The OpenStack Python client library for Swift (python-swiftclient) 1.0 through 1.9.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and
Mittel
CVE-2013-4662
CiviCRM SQL injection vulnerability via Quick Search API
Mittel
CVE-2013-4112
Exposure of Sensitive Information to an Unauthorized Actor in JGroup
Hoch
CVE-2012-6612
Improper Restriction of XML External Entity Reference in Apache Solr
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.