Medium
CVE-2011-4905
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filters
Low
CVE-2011-1772
Cross-site Scripting in Apache Struts
Medium
CVE-2011-3375
Apache Tomcat Exposes IP Addresses and HTTP Headers of Requests
Medium
CVE-2012-2138
Apache Sling POST Servlets Denial of Service Vulnerability
High
CVE-2012-2966
Caucho Quercus, as distributed in Resin, overwrites entries in SERVER superglobal array on basis of POST parameters
High
CVE-2012-2967
Caucho Quercus, as distributed in Resin, does not properly implement the `==` operator for comparisons
High
CVE-2012-2965
Caucho Quercus, as distributed in Resin, does not properly handle unspecified characters in the names of variables
High
CVE-2012-1618
Unescaped parameters in the PostgreSQL JDBC driver
Medium
CVE-2012-1154
Improper Access Control in JBoss mod_cluster
High
CVE-2012-1826
dotCMS allows remote authenticated users to execute arbitrary Java code
Medium
CVE-2011-2732
Improper Control of Generation of Code in Spring Security
Medium
CVE-2012-5055
Exposure of Sensitive Information to an Unauthorized Actor in Spring Security
Medium
CVE-2012-3428
User confusion in IronJacamar
Medium
CVE-2012-4418
Apache Axis2 Vulnerable to XML Signature wrapping attack
Medium
CVE-2011-4314
OpenID4Java does not verify that Attribute Exchange (AX) information is signed
Medium
CVE-2012-4446
Improper Authentication in Apache Qpid
Medium
CVE-2013-1814
Apache Rave information disclosure vulnerability
Medium
CVE-2013-3300
Lift Sensitive Information Disclosure
Low
CVE-2013-4600
Alkacon OpenCMS XSS via title and requestedResource parameters
Medium
CVE-2013-4766
Eucalyptus Unauthorized Access to CC/NC Log Files
Medium
CVE-2013-4378
Improper Neutralization of Input During Web Page Generation in JavaMelody
Medium
CVE-2011-1411
Improper Authentication in OpenSAML
Medium
CVE-2011-2731
Concurrent Execution using Shared Resource with Improper Synchronization in Spring Security
Medium
CVE-2013-4295
Apache Shindig PHP Sensitive Information Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.