Mittel
CVE-2013-0331
Schwachstellenarchiv
Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 71.647
Mittel
CVE-2013-0330
Jenkins allows Remote Users to Build Arbitrary Jobs
Mittel
CVE-2013-0328
Jenkins subject to Cross-site Scripting
Mittel
CVE-2013-0327
Jenkins Cross-Site Request Forgery vulnerability
Mittel
CVE-2013-0329
Jenkins Cross-Site Request Forgery vulnerability
Mittel
CVE-2013-0305
The administrative interface for Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 does not check permissions for the history view, which allows remote authenticated ad
Mittel
CVE-2013-0306
The form library in Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 allows remote attackers to bypass intended resource limits for formsets and cause a denial of serv
Niedrig
CVE-2013-0248
Incorrect Default Permissions in Apache Commons FileUpload
Mittel
CVE-2013-0239
Improper Authentication in Apache CXF
Niedrig
CVE-2013-0158
Jenkins allows attackers to obtain the master cryptographic key
Mittel
CVE-2013-7489
The Beaker library through 1.11.0 for Python is affected by deserialization of untrusted data, which could lead to arbitrary code execution.
Mittel
CVE-2013-4791
PrestaShop Stored Cross-Site Scripting Vulnerability
Hoch
CVE-2013-0294
packet.py in pyrad before 2.1 uses weak random numbers to generate RADIUS authenticators and hash passwords, which makes it easier for remote attackers to obtain sensitive information via a brute forc
Mittel
CVE-2013-6430
Improper Neutralization of Input During Web Page Generation in Spring Framework
Mittel
CVE-2013-7062
Multiple cross-site scripting (XSS) vulnerabilities in Zope, as used in Plone 3.3.x through 3.3.6, 4.0.x through 4.0.9, 4.1.x through 4.1.6, 4.2.x through 4.2.7, and 4.3 through 4.3.2, allow remote at
Mittel
CVE-2013-4752
Symfony Host Header Injection vulnerability in the HttpFoundation component
Mittel
CVE-2013-7371
Node Connect Reflected Cross-Site Scripting in Sencha Labs Connect middleware
Mittel
CVE-2013-0342
The CreateID function in packet.py in pyrad before 2.1 uses sequential packet IDs, which makes it easier for remote attackers to spoof packets by predicting the next ID, a different vulnerability than
Kritisch
CVE-2013-4409
ReviewBoard and Djblets library are vulnerable to code execution
Hoch
CVE-2013-4251
The scipy.weave component in SciPy before 0.12.1 creates insecure temporary directories.
Hoch
CVE-2013-4751
Symfony collectionCascaded and collectionCascadedDeeply fields security bypass
Mittel
CVE-2013-2255
OpenStack Keystone and other components vulnerable to Improper Certificate Validation
Mittel
CVE-2022-1571
Cross-site Scripting in FacturaScripts
Mittel
CVE-2022-1555
Microweber vulnerable to cross-site scripting (XSS)
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.