Medium
CVE-2014-2853
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2013-6397
Improper Limitation of a Pathname to a Restricted Directory in Apache Solr
Medium
CVE-2015-5210
Apache Ambari Open Redirect
Medium
CVE-2015-1775
Apache Ambari SSRF Vulnerability
Medium
CVE-2012-4437
Cross-site Scripting in SmartyException
High
CVE-2012-5498
queryCatalog.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to bypass caching and cause a denial of service via a crafted request to a collection.
Medium
CVE-2014-0012
FileSystemBytecodeCache in Jinja2 2.7.2 does not properly create temporary directories, which allows local users to gain privileges by pre-creating a temporary directory with a user's uid. NOTE: this
High
CVE-2015-8566
Joomla! Framework Remote Code Injection Vulnerability
Medium
CVE-2015-8759
TYPO3 Cross-site Scripting vulnerability
Medium
CVE-2015-8756
TYPO3 CMS indexed search Cross-site Scripting vulnerability
Medium
CVE-2015-8760
TYPO3 allows remote attackers to embed Flash videos from external domain
Medium
CVE-2015-8755
Typo3 XSS Vulnerability
Medium
CVE-2016-1912
Dolibarr ERP and CRM contain XSS Vulnerabilities
Medium
CVE-2015-8795
Improper Neutralization of Input During Web Page Generation in Apache Solr
Medium
CVE-2015-8797
Improper Neutralization of Input During Web Page Generation in Apache Solr
Low
CVE-2014-7217
phpMyAdmin cross-site scripting Vulnerability via ENUM value
Medium
CVE-2015-0265
Apache Ranger Cross-site Scripting vulnerability
High
CVE-2016-3164
Drupal Open Redirect
Medium
CVE-2016-3166
Drupal CRLF injection vulnerability in the drupal_set_header function
High
CVE-2015-0266
Apache Ranger allows users to bypass intended access restrictions via direct access to module URLs
High
CVE-2016-3165
Drupal Form API ignores access restrictions on submit buttons
High
CVE-2016-3169
Drupal saving user accounts can sometimes grant the user all roles
Medium
CVE-2015-5167
Apache Ranger allows users to bypass intended access restrictions via the REST API
Medium
CVE-2016-3168
Drupal Reflected file download vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.