Medium
CVE-2014-3627
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
High
CVE-2014-3137
Bottle 0.10.x before 0.10.12, 0.11.x before 0.11.7, and 0.12.x before 0.12.6 does not properly limit content types, which allows remote attackers to bypass intended access restrictions via an accepted
Low
CVE-2011-3591
phpMyAdmin Multiple XSS Vulnerabilities After Inline Editing and Save
Low
CVE-2011-3592
phpMyAdmin Multiple XSS Vulnerabilities
Medium
CVE-2013-6919
phpThumb is vulnerable to Server-Side Request Forgery (SSRF)
Medium
CVE-2013-5958
Symfony Denial of Service Via Long Password Hashing
High
CVE-2014-9509
Typo3 Vulnerable to Cache Poisoning
Medium
CVE-2014-3628
Improper Neutralization of Input During Web Page Generation in Apache Solr
Medium
CVE-2015-1039
ZF-Commons ZfcUser Vulnerable to XSS in Login Redirect
Medium
CVE-2012-5370
JRuby denial of service via Hash Collision
Medium
CVE-2013-2035
Improper Control of Generation of Code in HawtJNI
Medium
CVE-2014-7816
Improper Limitation of a Pathname to a Restricted Directory in JBoss Undertow
Critical
CVE-2015-0838
Buffer overflow in the C implementation of the apply_delta function in _pack.c in Dulwich before 0.9.9 allows remote attackers to execute arbitrary code via a crafted pack file.
Critical
CVE-2014-9706
The build_index_from_tree function in index.py in Dulwich before 0.9.9 allows remote attackers to execute arbitrary code via a commit with a directory path starting with .git/, which is not properly h
Medium
CVE-2014-7839
XML External Entity Reference in RESTEasy
High
CVE-2015-0846
django-markupfield before 1.3.2 uses the default docutils RESTRUCTUREDTEXT_FILTER_SETTINGS settings, which allows remote attackers to include and read arbitrary files via unspecified vectors.
High
CVE-2014-8125
Improper Input Validation in Drools and jBPM
Medium
CVE-2015-3337
Improper Limitation of a Pathname to a Restricted Directory in Elasticsearch
Low
CVE-2015-4053
The admin command in ceph-deploy before 1.5.25 uses world-readable permissions for /etc/ceph/ceph.client.admin.keyring, which allows local users to obtain sensitive information by reading the file.
Medium
CVE-2014-1836
ImpressCMS Path Traversal to Arbitrary File Delete
Medium
CVE-2015-3158
PicketLink does not properly check role based authorization
High
CVE-2011-2687
Drupal Access Control Bypass
Medium
CVE-2015-5612
October CMS XSS In Caption Tag of Profile
Medium
CVE-2014-5191
The Preview plugin in CKEditor allows Cross-site scripting (XSS)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.