High
CVE-2014-2686
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
High
CVE-2014-0161
ovirt-engine-sdk-python before 3.4.0.7 and 3.5.0.4 does not verify that the hostname of the remote endpoint matches the Common Name (CN) or subjectAltName as specified by its x.509 certificate in a TL
High
CVE-2014-3643
jersey: XXE via parameter entities
Medium
CVE-2014-3652
JBoss KeyCloak Open Redirect
Medium
CVE-2014-3656
JBoss KeyCloak Cross-site Scripting Vulnerability
Medium
CVE-2014-3655
JBoss KeyCloak is vulnerable to soft token deletion via CSRF
Medium
CVE-2022-29435
Code Snippets Extended <= 1.4.7 - Cross-Site Request Forgery
High
CVE-2022-29436
Code Snippets Extended <= 1.4.7 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2022-29449
Opal Hotel Room Booking plugin <= 1.2.7 - Authenticated (Contributor+) Stored Cross-Site Scripting
Medium
CVE-2022-29445
Popup Box <= 2.1.2 - Authenticated Local File Inclusion
Medium
CVE-2008-6548
The rst parser (parser/text_rst.py) in MoinMoin 1.6.1 does not check the ACL of an included page, which allows attackers to read unauthorized include files via unknown vectors.
High
CVE-2008-6507
phpBB vulnerable to sensitive information disclosure
Medium
CVE-2008-6682
Apache Struts is vulnerable to Cross-site Scripting
Medium
CVE-2008-6505
Apache Struts directory traversal vulnerability
High
CVE-2010-1630
phpBB vulnerability related to use of "forum id" in circumstances related to a "global announcement."
Medium
CVE-2010-2086
Apache MyFaces Cross-site Scripting vulnerability
Medium
CVE-2010-2274
Dojo Open Redirect vulnerability
Medium
CVE-2010-2422
Cross-site scripting (XSS) vulnerability in PortalTransforms in Plone 2.1 through 3.3.4 before hotfix 20100612 allows remote attackers to inject arbitrary web script or HTML via the safe_html transfor
Medium
CVE-2010-2479
HTML Purifier Cross-site Scripting (XSS) vulnerability
Medium
CVE-2010-2487
Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.7.3 and earlier, 1.8.x before 1.8.8, and 1.9.x before 1.9.3 allow remote attackers to inject arbitrary web script or HTML via crafted
Medium
CVE-2010-2969
Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.7.3 and earlier, and 1.9.x before 1.9.3, allow remote attackers to inject arbitrary web script or HTML via crafted content, related to
Medium
CVE-2010-2970
Multiple cross-site scripting (XSS) vulnerabilities in MoinMoin 1.9.x before 1.9.3 allow remote attackers to inject arbitrary web script or HTML via crafted content, related to (1) action/SlideShow.py
Medium
CVE-2010-2480
Mako before 0.3.4 relies on the cgi.escape function in the Python standard library for cross-site scripting (XSS) protection, which makes it easier for remote attackers to conduct XSS attacks via vect
Medium
CVE-2010-2958
phpMyAdmin Cross-site Scripting vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.