Medium
CVE-2006-7217
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2006-7196
Cross-site scripting in Apache Tomcat
High
CVE-2006-7197
Apache Tomcat Buffer Over-Read
Medium
CVE-2006-7195
Apache Tomcat XSS Vulnerability
Medium
CVE-2006-6969
Jetty Uses Predictable Session Identifiers
High
CVE-2006-5878
Cross-site request forgery (CSRF) vulnerability in Edgewall Trac 0.10 and earlier allows remote attackers to perform unauthorized actions as other users via unknown vectors.
Medium
CVE-2006-5031
CakePHP directory traversal vulnerability allows remote attackers to read arbitrary files
Medium
CVE-2006-4936
Moodle does not properly validate module instance id
Medium
CVE-2006-4067
Cross-site scripting (XSS) vulnerability in CakePHP
Medium
CVE-2006-3935
Alkacon OpenCMS Improper Access Control via system/workplace/views/admin/admin-main.jsp
Medium
CVE-2006-3936
Alkacon OpenCms Exposes JSP Source Code
Medium
CVE-2006-3934
Alkacon OpenCMS Absolute Path Traversal via pathname in filePath parameter
Low
CVE-2006-3933
Alkacon OpenCms XSS via unsanitized message body
Medium
CVE-2006-3835
Apache Tomcat Reveals Directories
High
CVE-2006-3695
Trac before 0.9.6 does not disable the "raw" or "include" commands when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows remote attackers t
Medium
CVE-2006-3360
phpSysInfo allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) sequence
Medium
CVE-2006-2759
Improper Input Validation in Mortbay Jetty
Medium
CVE-2006-2758
Jetty Directory Traversal Vulnerability
Low
CVE-2006-2571
Alkacon OpenCms XSS via query parameter in a search action
High
Exploited in attacks
CVE-2006-1547
Improper Input Validation in Apache Struts
Low
CVE-2006-1548
Cross-site scripting in Apache Struts
High
CVE-2006-1546
Apache Struts vulnerable to Improper Input Validation
Critical
CVE-2006-0931
PEAR::Archive_Tar Directory Traversal vulnerability
High
CVE-2006-0868
PEAR::Auth potential authentication bypass vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.