High
CVE-2009-2659
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2009-1595
Ignite Realtime Openfire Allows Users to Change Passwords of Arbitrary Accounts
Medium
CVE-2009-1523
Directory traversal in Mort Bay Jetty
Medium
CVE-2009-1482
Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) an AttachFile sub-action
Medium
CVE-2009-1275
Apache Tiles Vulnerable to XSS via EL Expression Injection
High
CVE-2009-1264
Frontend User Registration extension for TYPO3 does not properly verify access rights
Medium
CVE-2009-1190
Spring Framework Inefficient Regular Expression Complexity
High
CVE-2009-1149
phpMyAdmin HTTP Response Splitting Vulnerability
Medium
CVE-2009-0816
Typo3 Backend XSS Vulnerability
Medium
CVE-2009-0815
TYPO3 leaks a hash secret in an error message
Medium
CVE-2009-0783
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
Medium
CVE-2009-0781
Cross-site scripting in Apache Tomcat
High
CVE-2009-0669
Zope Object Database (ZODB) before 3.8.2, when certain Zope Enterprise Objects (ZEO) database sharing is enabled, allows remote attackers to bypass authentication via vectors involving the ZEO network
Critical
CVE-2009-0668
Unspecified vulnerability in Zope Object Database (ZODB) before 3.8.2, when certain Zope Enterprise Objects (ZEO) database sharing is enabled, allows remote attackers to execute arbitrary Python code
Medium
CVE-2009-0580
Exposure of Sensitive Information in Apache Tomcat
High
CVE-2009-0258
Indexed Search Engine for TYPO3 Command Execution via Metacharacter Injection
High
CVE-2009-0256
Authentication library in TYPO3 vulnerable to session fixation
Medium
CVE-2009-0217
Apache XML Security For Java vulnerable to authentication bypass by HMAC truncation
Medium
CVE-2009-0039
Apache Geronimo Application Server CSRF vulnerabilities
Medium
CVE-2009-0038
Apache Geronimo Application Server multiple cross-site scripting (XSS) vulnerabilities
Medium
CVE-2009-0033
Apache Tomcat Denial of Service via Malformed Request Headers
Medium
CVE-2009-0026
Apache Jackrabbit contains Cross-site Scripting
High
CVE-2008-4524
AdaptCMS SQL Injection vulnerability
Low
CVE-2008-4308
Apache Tomcat information disclosure vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.