Medium
CVE-2014-4301
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2016-6345
Exposure of Sensitive Information to an Unauthorized Actor in RESTEasy
Critical
CVE-2016-4972
OpenStack Murano Code Execution
High
CVE-2016-6801
Apache Jackrabbit Authentication Hijacking Vulnerability
Medium
CVE-2016-7570
Drupal Users without "Administer comments" can set comment visibility on nodes they can edit
Medium
CVE-2016-7572
Drupal Unprivileged access to config export
Medium
CVE-2016-7571
Drupal Cross-site scripting (XSS) vulnerability
High
CVE-2013-2185
Deserialization of Untrusted Data in Apache Tomcat
Medium
CVE-2012-6092
Cross-site Scripting in Apache ActiveMQ
Medium
CVE-2013-1880
Apache ActiveMQ Cross-site scripting (XSS) vulnerability in the Portfolio publisher servlet
Medium
CVE-2012-6551
Apache ActiveMQ default configuration subject to denial of service
Medium
CVE-2013-3060
Improper Authentication in Apache ActiveMQ
Medium
CVE-2013-4347
The (1) make_nonce, (2) generate_nonce, and (3) generate_verifier functions in SimpleGeo python-oauth2 uses weak random numbers to generate nonces, which makes it easier for remote attackers to guess
High
CVE-2013-4346
The Server.verify_request function in SimpleGeo python-oauth2 does not check the nonce, which allows remote attackers to perform replay attacks via a signed URL.
High
CVE-2013-4701
PHP OpenID Library Denial of Service vulnerability
High
CVE-2013-6418
PyWBEM 0.7 and earlier uses a separate connection to validate X.509 certificates, which allows man-in-the-middle attackers to spoof a peer via an arbitrary certificate.
Medium
CVE-2013-6444
PyWBEM 0.7 and earlier does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle
Medium
CVE-2013-7073
TYPO3 vulnerable to Information Disclosure via Content Editing Wizards component
Medium
CVE-2014-5325
Exposure of Sensitive Information to an Unauthorized Actor in Direct Web Remoting
Medium
CVE-2014-9508
Typo3 Open Redirect In Frontend Rendering
Medium
CVE-2015-1776
Exposure of Sensitive Information to an Unauthorized Actor in Apache Hadoop
High
CVE-2015-5723
Doctrine Security Misconfiguration Vulnerability
Critical
CVE-2015-7695
Zend Framework SQL injection vector using null byte for PDO
Critical
CVE-2016-1505
Radicale is vulnerable to directory traversal on Windows Filesystem Storage Backend component
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.