Niedrig
CVE-2008-1753
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 71.647
Mittel
CVE-2008-1728
Ignite Realtime Openfire allows remote authenticated users to cause a denial of service
Niedrig
CVE-2008-1510
Alkacon OpenCMS XSS via searchfilter or listSearchFilter parameter
Mittel
CVE-2008-1502
Moodle vulnerable to Cross-site scripting
Kritisch
CVE-2008-1475
The xml-rpc server in Roundup 1.4.4 does not check property permissions, which allows attackers to bypass restrictions and edit or read restricted properties via the (1) list, (2) display, and (3) set
Mittel
CVE-2008-1474
Multiple unspecified vulnerabilities in Roundup before 1.4.4 have unknown impact and attack vectors, some of which may be related to cross-site scripting (XSS).
Mittel
CVE-2008-1301
Alkacon OpenCMS Absolute Path Traversal via pathname in filePath.0 parameter
Niedrig
CVE-2008-1300
Alkacon Open CMS XSS via Logfile Viewer Settings function
Mittel
CVE-2008-1285
Cross-site scripting (XSS) vulnerability in Sun Java Server Faces (JSF)
Mittel
CVE-2008-1232
Apache Tomcat Cross-site scripting (XSS) vulnerability
Niedrig
CVE-2008-1045
Alkacon OpenCMS XSS via file tree navigation in system/workplace/views/explorer/tree_files.jsp
Hoch
CVE-2008-0299
common.py in Paramiko 1.7.1 and earlier, when using threads or forked processes, does not properly use RandomPool, which allows one session to obtain sensitive information from another session by pred
Hoch
CVE-2008-0252
Directory traversal vulnerability in the _get_file_path function in (1) lib/sessions.py in CherryPy 3.0.x up to 3.0.2, (2) filter/sessionfilter.py in CherryPy 2.1, and (3) filter/sessionfilter.py in C
Mittel
CVE-2008-0002
Apache Tomcat Sensitive Information Disclosure
Hoch
CVE-2007-6738
pyftpdlib before 0.1.1 does not choose a random value for the port associated with the PASV command, which makes it easier for remote attackers to obtain potentially sensitive information about the nu
Mittel
CVE-2007-6726
Apache Struts Dojo Plugin XSS Vulnerability
Hoch
CVE-2007-6721
Legion of the Bouncy Castle Java Cryptography API Bleichenbacher Oracle Vulnerability
Mittel
CVE-2007-6672
Mortbay Jetty Double Slash URI Information Disclosure Vulnerability
Mittel
CVE-2007-6382
Robocode Arbitrary Code Execution
Mittel
CVE-2007-6286
Apache Tomcat Does Not Properly Handle Empty Requests
Kritisch
CVE-2007-5741
Plone 2.5 through 2.5.4 and 3.0 through 3.0.2 allows remote attackers to execute arbitrary Python code via network data containing pickled objects for the (1) statusmessages or (2) linkintegrity modul
Hoch
CVE-2007-5712
The internationalization (i18n) framework in Django 0.91, 0.95, 0.95.1, and 0.96, and as used in other products such as PyLucid, when the USE_I18N option and the i18n component are enabled, allows rem
Hoch
CVE-2007-5614
Improper Authentication in Mortbay Jetty
Mittel
CVE-2007-5615
Mortbay Jetty CRLF Injection Vulnerability
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.