High
CVE-2017-6086
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2008-6504
Improper Input Validation in OpenSymphony XWork
High
CVE-2008-6547
schema.py in FormEncode for Python (python-formencode) 1.0 does not apply the chained_validators feature, which allows attackers to bypass intended access restrictions via unknown vectors.
High
CVE-2008-6603
MoinMoin 1.6.2 and 1.7 does not properly enforce ACL checks when acl_hierarchic is set to True, which might allow remote attackers to bypass intended access restrictions, a different vulnerability tha
Medium
CVE-2011-0451
EC-CUBE XSS Vulnerabilities
Critical
CVE-2011-0720
Unspecified vulnerability in Plone 2.5 through 4.0, as used in Conga, luci, and possibly other products, allows remote attackers to obtain administrative access, read or create arbitrary content, and
Medium
CVE-2011-0986
phpMyAdmin allows remote attackers to obtain installation path via direct request for nonexistent file
Medium
CVE-2011-1058
Cross-site scripting (XSS) vulnerability in the reStructuredText (rst) parser in parser/text_rst.py in MoinMoin before 1.9.3, when docutils is installed or when "format rst" is set, allows remote atta
Medium
CVE-2011-1419
Apache Tomcat does not follow ServletSecurity annotations
Medium
CVE-2011-1714
QooxDoo XSS in Callback Parameter
Critical
CVE-2015-6941
win_useradd, salt-cloud and the Linode driver in salt 2015.5.x before 2015.5.6, and 2015.8.x before 2015.8.1 leak password information in debug logs.
Medium
CVE-2015-2674
Restkit allows man-in-the-middle attackers to spoof TLS servers by leveraging use of the ssl.wrap_socket function in Python with the default CERT_NONE value for the cert_reqs argument.
Medium
CVE-2013-4204
Improper Neutralization of Input During Web Page Generation in Google Web Toolkit
High
CVE-2017-12881
Spring Batch Admin vulnerable to Cross-site request forgery (CSRF) in the file upload functionality
Medium
CVE-2017-12882
Spring Batch Admin vulnerable to Stored Cross-site scripting (XSS) in the file upload functionality
High
CVE-2015-5081
Cross-site request forgery (CSRF) vulnerability in django CMS before 3.0.14, 3.1.x before 3.1.1 allows remote attackers to manipulate privileged users into performing unknown actions via unspecified v
Critical
CVE-2017-8658
ChakraCore RCE Vulnerability
High
CVE-2015-4082
attic before 0.15 does not confirm unencrypted backups with the user, which allows remote attackers with read and write privileges for the encrypted repository to obtain potentially sensitive informat
High
CVE-2010-4961
Webkit PDFs for TYPO3 has SQL Injection vulnerability
High
CVE-2010-4962
Webkit PDFs for TYPO3 allows remote attackers to execute arbitrary commands
Low
CVE-2010-5097
TYPO3 Cross-site scripting (XSS) vulnerability in the click enlarge functionality
Medium
CVE-2010-5101
TYPO3 Directory Traversal vulnerability
Medium
CVE-2010-5099
TYPO3 Path Traversal vulnerability
Low
CVE-2010-5100
TYPO3 Cross-Site Scripting vulnerability in the Install Tool
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.