High
CVE-2009-4762
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2009-4665
CuteSoft CuteEditor Path Traversal vulnerability
High
CVE-2009-4611
Improper input validation in Mort Bay Jetty
High
CVE-2009-4405
Multiple unspecified vulnerabilities in Trac before 0.11.6 have unknown impact and attack vectors, possibly related to (1) "policy checks in report results when using alternate formats" or (2) a "chec
Medium
CVE-2009-4269
Use of Password Hash With Insufficient Computational Effort in Apache Derby
Medium
CVE-2009-4160
TYPO3 Simple Download-System with Counter and Categories Vulnerable to Information Disclosure
Low
CVE-2009-4159
TYPO3 Direct Mail Extension Vulnerable to Cross-Site Scripting (XSS)
Medium
CVE-2009-3821
Apache Solr Search for TYPO3 vulnerable to Cross-site Scripting
Medium
CVE-2009-3818
freeCap CAPTCHA extension for TYPO3 has vulnerability in the session handling feature
High
CVE-2009-3695
Algorithmic complexity vulnerability in the forms library in Django 1.0 before 1.0.4 and 1.1 before 1.1.1 allows remote attackers to cause a denial of service (CPU consumption) via a crafted (1) Email
Medium
CVE-2009-3696
phpMyAdmin Cross-site Scripting In MySQL Table Name
Medium
CVE-2009-3635
TYPO3 Install Tool Subcomponent Allows Access Using Only a Password's MD5 Hash as a Credential
Medium
CVE-2009-3636
Typo3 API Install Tool vulnerable to Cross-site Scripting
Medium
CVE-2009-3633
TYPO3 API function vulnerable to Cross-site Scripting
High
CVE-2009-3631
TYPO3 Backend Command Injection via Shell Metacharacters in Uploaded File Name
Medium
CVE-2009-3630
TYPO3 Backend vulnerable to Frame Hijacking
Low
CVE-2009-3629
TYPO3 Backend vulnerable to Cross-site Scripting
Medium
CVE-2009-3628
TYPO3 Backend Discloses Encryption Key
Critical
CVE-2009-3555
Apache Tomcat affected by vulnerability in TLS and SSL protocol
High
CVE-2009-2940
The pygresql module 3.8.1 and 4.0 for Python does not properly support the PQescapeStringConn function, which might allow remote attackers to leverage escaping issues involving multibyte character enc
Medium
CVE-2009-2902
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Apache Tomcat
Medium
CVE-2009-2901
Improper Authentication in Apache Tomcat
Critical
CVE-2009-2701
Unspecified vulnerability in the Zope Enterprise Objects (ZEO) storage-server functionality in Zope Object Database (ZODB) 3.8 before 3.8.3 and 3.9.x before 3.9.0c2, when certain ZEO database sharing
Medium
CVE-2009-2693
Apache Tomcat Directory Traversal vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.