Medium
CVE-2013-4249
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2013-4649
DotNetNuke (DNN) Cross-site scripting (XSS) vulnerability via the __dnnVariable parameter
High
CVE-2013-4748
News system (news) extension for TYPO3 vulnerable to SQL Injection
Low
CVE-2013-5100
Static Methods since 2007 (div2007) extension for TYPO3 vulnerable to Cross-site Scripting
High
CVE-2013-5322
CoolURI extension for TYPO3 vulnerable to SQL Injection
Low
CVE-2013-5323
Static Info Tables (static_info_tables) extension TYPO3 vulnerable to Cross-site Scripting
Low
CVE-2013-5573
Jenkins allows Cross-Site Scripting (XSS) in User Configuration
Low
CVE-2013-7078
TYPO3 Cross-site scripting (XSS) vulnerability in the Extbase Framework
Low
CVE-2013-7074
TYPO3 Cross-Site Scripting (XSS) vulnerabilities in Content Editing Wizards component
Medium
CVE-2013-7082
TYPO3 Flow Cross-site scripting (XSS) vulnerability
Medium
CVE-2013-7077
TYPO3 Cross-site scripting (XSS) vulnerability in the Backend User Administration Module
Low
CVE-2014-1624
Race condition in the xdg.BaseDirectory.get_runtime_dir function in python-xdg 0.25 allows local users to overwrite arbitrary files by pre-creating /tmp/pyxdg-runtime-dir-fallback-victim to point to a
Medium
CVE-2014-2059
Jenkins directory traversal vulnerability
Medium
CVE-2014-2067
Jenkins cross-site scripting (XSS) vulnerability
Medium
CVE-2014-3529
Improper Restriction of XML External Entity Reference in Apache POI
High
CVE-2014-3563
Multiple unspecified vulnerabilities in Salt (aka SaltStack) before 2014.1.10 allow local users to have an unspecified impact via vectors related to temporary file creation in (1) seed.py, (2) salt-ss
Medium
CVE-2014-3664
Jenkins Path Traversal vulnerability
Medium
CVE-2014-3574
Improper Input Validation in Apache POI
Medium
CVE-2015-3257
zend-diactoros Cross-site Scripting (XSS)
High
CVE-2016-8752
Apache Atlas versions 0.6.0 (incubating), 0.7.0 (incubating), and 0.7.1 (incubating) allow access to the webapp directory contents by pointing to URIs like /js and /img.
Medium
CVE-2017-3153
Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to Reflected XSS in the search functionality.
Medium
CVE-2017-12870
SimpleSAMLphp Unauthenticated encryption in CBC mode
Medium
CVE-2017-12871
SimpleSAMLphp Incorrect IV generation for encryption
Medium
CVE-2014-8327
fal_sftp extension for TYPO3 uses weak permissions for sFTP driver files and folders
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.