Low
CVE-2010-3094
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
High
CVE-2010-3604
powermail extension for TYPO3 vulnerable to SQL Injection
Medium
CVE-2010-3715
TYPO3 cross-site scripting (XSS) vulnerability in the RemoveXSS function and the backend
Medium
CVE-2010-2057
Improper Authentication in Apache MyFaces
Medium
CVE-2010-2477
Multiple cross-site scripting (XSS) vulnerabilities in the paste.httpexceptions implementation in Paste before 1.7.4 allow remote attackers to inject arbitrary web script or HTML via vectors involving
High
CVE-2010-3708
Drools Improper Input Validation vulnerability allows remote attackers to execute arbitrary code in JBoss EAP
Medium
CVE-2010-3495
Race condition in ZEO/StorageServer.py in Zope Object Database (ZODB) before 3.10.0 allows remote attackers to cause a denial of service (daemon outage) by establishing and then immediately closing a
High
CVE-2010-4335
CakePHP allows remote attackers to modify internal Cake cache and execute arbitrary code
High
CVE-2010-4481
phpMyAdmin allows remote attackers to bypass authentication and obtain sensitive information
High
CVE-2008-7252
phpMyAdmin unsafely handles temporary files
Critical
CVE-2011-0432
Multiple SQL injection vulnerabilities in the get_userinfo method in the MySQLAuthHandler class in DAVServer/mysqlauth.py in PyWebDAV before 0.9.4.1 allow remote attackers to execute arbitrary SQL com
Medium
CVE-2011-2087
Apache Struts Multiple XSS Vulnerabilities
High
CVE-2010-4340
libcloud before 0.4.1 does not verify SSL certificates for HTTPS connections, which allows remote attackers to spoof certificates and bypass intended access restrictions via a man-in-the-middle (MITM)
Medium
CVE-2011-1498
Exposure of Sensitive Information to an Unauthorized Actor in Apache HttpClient
Low
CVE-2011-4457
OWASP HTML Sanitizer allows redirecting to an arbitrary URL when JavaScript is disabled
Low
CVE-2011-4332
Joomla! vulnerable to Cross-site Scripting
Medium
CVE-2011-4356
Celery 2.1 and 2.2 before 2.2.8, 2.3 before 2.3.4, and 2.4 before 2.4.4 changes the effective id but not the real id during processing of the --uid and --gid arguments to celerybeat, celeryd_detach, c
Medium
CVE-2011-4905
Denial of Service in Apache ActiveMQ
Low
CVE-2011-1772
Cross-site Scripting in Apache Struts
Medium
CVE-2011-4617
virtualenv.py in virtualenv before 1.5 allows local users to overwrite arbitrary files via a symlink attack on a certain file in /tmp/.
Medium
CVE-2011-1941
phpMyAdmin Open Redirect in redirector
Medium
CVE-2011-3375
Apache Tomcat Exposes IP Addresses and HTTP Headers of Requests
Medium
CVE-2011-3744
HTML Purifier allows remote attackers to obtain sensitive information
Medium
CVE-2011-3712
CakePHP 1.3.7 allows remote attackers to obtain sensitive information via a direct request to a .php file
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.