Medium
CVE-2013-4714
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,068
Reset filters
High
CVE-2013-3239
phpMyAdmin Remote Code Execution
High
CVE-2012-3363
Zend Framework XXE Vulnerability
Medium
CVE-2012-1589
Drupal Open Redirect
Medium
CVE-2012-2153
Drupal improper access restrictions
High
CVE-2013-6389
Drupal has open redirect vulnerability in the Overlay module
Medium
CVE-2013-7075
TYPO3 vulnerable to Insecure Unserialize via Content Editing Wizards component
Medium
CVE-2013-7081
TYPO3 Improper Access Control vulnerability
Medium
CVE-2013-7080
TYPO3 is vulnerable to Mass Assignment in the Extension table administration library
Medium
CVE-2014-0808
EC-CUBE vulnerable to authorization bypass
Medium
CVE-2013-4662
CiviCRM SQL injection vulnerability via Quick Search API
High
CVE-2014-2921
Pimcore Vulnerable to PHP Object Injection Attacks
High
CVE-2013-4321
TYPO3 vulnerable to remote authenticated arbitrary code execution
Medium
CVE-2012-6146
Typo3 Backend History Module Vulnerable to XSS
Medium
CVE-2013-4320
TYPO3 Improper Access Management in the File Abstraction Layer
High
CVE-2013-4250
TYPO3 doesn't properly check file extensions
Medium
CVE-2014-3946
Typo3 Information Disclosure
Critical
CVE-2014-3945
TYPO3 vulnerable to authentication bypass via leveraging knowledge of password hash
Medium
CVE-2014-3944
TYPO3 Improper Session Invalidation
Low
CVE-2014-2054
Advanced Contact form 7 DB <= 2.0.8 & Import any XML, CSV or Excel File to WordPress <= 3.8.0 - Use of Vulnerable Component (PHPExcel)
High
CVE-2014-2055
XXE in SabreDAV
Medium
CVE-2012-3522
GeSHi vulnerable to Cross-site Scripting
High
CVE-2012-3521
GeSHi vulnerable to Directory Traversal
Medium
CVE-2014-4036
ImpressCMS Cross-site scripting Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.