Critical
CVE-2013-6288
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
High
CVE-2013-6617
The salt master in Salt (aka SaltStack) 0.11.0 through 0.17.0 does not properly drop group privileges, which makes it easier for remote attackers to gain privileges.
Medium
CVE-2013-4714
Tiki Wiki CMS Groupware Cross-site scripting (XSS) vulnerability
High
CVE-2013-4437
Unspecified vulnerability in salt-ssh in Salt (aka SaltStack) 0.17.0 has unspecified impact and vectors related to "insecure Usage of /tmp."
High
CVE-2013-4436
The default configuration for salt-ssh in Salt (aka SaltStack) 0.17.0 does not validate the SSH host key of requests, which allows remote attackers to have unspecified impact via a man-in-the-middle (
High
CVE-2013-4435
Salt (aka SaltStack) 0.15.0 through 0.17.0 allows remote authenticated users who are using external authentication or client ACL to execute restricted routines by embedding the routine in another rout
High
CVE-2013-3239
phpMyAdmin Remote Code Execution
High
CVE-2013-4510
Tryton Directory Traversal vulnerability
Medium
CVE-2013-6348
Apache Struts is vulnerable to Cross-site Scripting
Medium
CVE-2013-1865
OpenStack Keystone Folsom (2012.2) does not properly perform revocation checks for Keystone PKI tokens when done through a server, which allows remote attackers to bypass intended access restrictions
High
CVE-2012-3363
Zend Framework XXE Vulnerability
High
CVE-2013-4314
The X509Extension in pyOpenSSL before 0.13.1 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle at
High
CVE-2013-4315
Directory traversal vulnerability in Django 1.4.x before 1.4.7, 1.5.x before 1.5.3, and 1.6.x before 1.6 beta 3 allows remote attackers to read arbitrary files via a file path in the ALLOWED_INCLUDE_R
Medium
CVE-2012-1589
Drupal Open Redirect
Medium
CVE-2012-2153
Drupal improper access restrictions
Medium
CVE-2012-6081
Multiple unrestricted file upload vulnerabilities in the (1) twikidraw (action/twikidraw.py) and (2) anywikidraw (action/anywikidraw.py) actions in MoinMoin before 1.9.6 allow remote authenticated use
Medium
CVE-2013-5676
Jenkins SonarQube Plugin Stores Passwords in Cleartext
High
CVE-2013-6389
Drupal has open redirect vulnerability in the Overlay module
Medium
CVE-2013-7075
TYPO3 vulnerable to Insecure Unserialize via Content Editing Wizards component
Medium
CVE-2013-7081
TYPO3 Improper Access Control vulnerability
Medium
CVE-2013-7080
TYPO3 is vulnerable to Mass Assignment in the Extension table administration library
High
CVE-2013-2104
python-keystoneclient before 0.2.4, as used in OpenStack Keystone (Folsom), does not properly check expiry for PKI tokens, which allows remote authenticated users to (1) retain use of a token after it
Medium
CVE-2014-0808
EC-CUBE vulnerable to authorization bypass
High
CVE-2013-1443
The authentication framework (django.contrib.auth) in Django 1.4.x before 1.4.8, 1.5.x before 1.5.4, and 1.6.x before 1.6 beta 4 allows remote attackers to cause a denial of service (CPU consumption)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.