Medium
CVE-2012-0392
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Medium
CVE-2012-0394
Apache Struts's DebuggingInterceptor component allows remote code execution in developer mode
Medium
CVE-2012-0393
Apache Struts's ParameterInterceptor component does not prevent access to public constructors
Low
CVE-2012-0325
Jenkins allows Cross-Site Scripting (XSS)
Low
CVE-2012-0324
Jenkins allows Cross-Site Scripting (XSS)
Medium
CVE-2012-0213
Denial of Service in Apache POI
High
CVE-2012-0215
model/modelstorage.py in the Tryton application framework (trytond) before 2.4.0 for Python does not properly restrict access to the Many2Many field in the relation model, which allows remote authenti
Medium
CVE-2012-0022
Denial of Service in Apache Tomcat
Critical
CVE-2022-28118
RCE in SiteServer CMS
High
CVE-2021-46440
Insecure password handling vulnerability in Strapi
Medium
CVE-2022-1456
Poll Maker <= 4.0.1 - Admin+ Stored Cross-Site Scripting
Medium
CVE-2022-24902
TkVideoplayer is a simple library to play video files in tkinter. Uncontrolled memory consumption in versions of TKVideoplayer prior to 2.0.0 can theoretically lead to performance degradation. There a
Medium
CVE-2011-0013
Improper Neutralization of Input During Web Page Generation in Apache Tomcat
High
CVE-2022-21167
Code Injection in Masuit.Tools.Core
Medium
CVE-2022-21149
SCart is vulnerable to cross-site scripting (XSS)
Critical
CVE-2022-24437
OS Command Injection in git-pull-or-clone
High
CVE-2022-21144
Denial of service vulnerability exists in libxmljs
High
CVE-2022-21189
Prototype Pollution in Dexie
High
CVE-2022-23923
Privilege Issues in jailed
High
CVE-2022-1544
Improper neutralization of formula elements in yii-helpers
Medium
CVE-2022-25645
Prototype Pollution in dset
Medium
CVE-2022-25349
materialize-css vulnerable to cross-site Scripting (XSS) due to improper escape of user input
High
CVE-2022-25647
Deserialization of Untrusted Data in Gson
Medium
CVE-2022-25842
Path Traversal in com.alibaba.oneagent:one-java-agent-plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.