Low
CVE-2010-5098
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2010-5103
TYPO3 SQL Injection vulnerability
Medium
CVE-2010-5104
TYPO3 Sensitive Information Disclosure via escapeStrForLike method
Medium
CVE-2011-2718
phpMyAdmin Directory Traversal Vulnerability
Medium
CVE-2011-4107
phpMyAdmin vulnerable to XML external entity (XXE) injection attack
Low
CVE-2011-4340
Symphony CMS vulnerable to Cross-site Scripting
Low
CVE-2011-4782
phpMyAdmin Cross-site Scripting vulnerability
Medium
CVE-2011-5245
Exposure of Sensitive Information to an Unauthorized Actor in RESTEasy
Medium
CVE-2012-0818
Exposure of Sensitive Information to an Unauthorized Actor in RESTEasy
Medium
CVE-2012-1006
Apache Struts Multiple Cross-site Scripting Vulnerabilities
High
CVE-2012-1176
Buffer overflow in the fribidi_utf8_to_unicode function in PyFriBidi before 0.11.0 allows remote attackers to cause a denial of service (application crash) via a 4-byte utf-8 sequence.
Medium
CVE-2012-1188
Fork CMS Multiple XSS Vulnerabilities
Medium
CVE-2012-1207
ForkCMS Directory Traversal vulnerability
Medium
CVE-2012-1296
Elefant CMS Multiple XSS Vulnerabilities
Medium
CVE-2012-2112
Typo3 Exception Handler XSS
Medium
CVE-2012-2417
PyCrypto before 2.6 does not produce appropriate prime numbers when using an ElGamal scheme to generate a key, which reduces the signature space or public key space and makes it easier for attackers t
Medium
CVE-2012-3467
Apache QPID Allows Remote Authentication Bypass
High
CVE-2012-3447
virt/disk/api.py in OpenStack Compute (Nova) 2012.1.x before 2012.1.2 and Folsom before Folsom-3 allows remote authenticated users to overwrite arbitrary files via a symlink attack on a file in an ima
Medium
CVE-2012-3527
TYPO3 allows remote authenticated backend users to unserialize arbitrary objects
Low
CVE-2012-3528
Typo3 Backend XSS Vulnerability
Low
CVE-2012-3529
Typo3 Backend Configuration XSS Vulnerability
Medium
CVE-2012-3530
Typo3 API XSS Vulnerability
Medium
CVE-2012-3531
Typo3 Install Tool XSS Vulnerability
Medium
CVE-2012-4386
Cross-Site Request Forgery in Apache Struts
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.