Low
CVE-2010-0684
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Medium
CVE-2010-0668
Unspecified vulnerability in MoinMoin 1.5.x through 1.7.x, 1.8.x before 1.8.7, and 1.9.x before 1.9.2 has unknown impact and attack vectors, related to configurations that have a non-empty superuser l
High
CVE-2010-0669
MoinMoin before 1.8.7 and 1.9.x before 1.9.2 does not properly sanitize user profiles, which has unspecified impact and attack vectors.
High
CVE-2010-0667
MoinMoin 1.9 before 1.9.1 does not perform the expected clearing of the sys.argv array in situations where the GATEWAY_INTERFACE environment variable is set, which allows remote attackers to obtain se
High
CVE-2010-0329
TYPO3 powermail Extension Vulnerable to SQL Injection via Unspecified Vectors
Medium
CVE-2009-5054
Smarty Does Not Consider Umask Values When Setting Permissions
Low
CVE-2009-4963
Commerce extension for TYPO3 vulnerable to Cross-site Scripting
High
CVE-2009-4803
Accessibility Glossary (a21glossary) SQL injection vulnerability
High
CVE-2009-4762
MoinMoin 1.7.x before 1.7.3 and 1.8.x before 1.8.3 checks parent ACLs in certain inappropriate circumstances during processing of hierarchical ACLs, which allows remote attackers to bypass intended ac
Medium
CVE-2009-4665
CuteSoft CuteEditor Path Traversal vulnerability
High
CVE-2009-4611
Improper input validation in Mort Bay Jetty
High
CVE-2009-4405
Multiple unspecified vulnerabilities in Trac before 0.11.6 have unknown impact and attack vectors, possibly related to (1) "policy checks in report results when using alternate formats" or (2) a "chec
Medium
CVE-2009-4269
Use of Password Hash With Insufficient Computational Effort in Apache Derby
Medium
CVE-2009-4160
TYPO3 Simple Download-System with Counter and Categories Vulnerable to Information Disclosure
Low
CVE-2009-4159
TYPO3 Direct Mail Extension Vulnerable to Cross-Site Scripting (XSS)
Medium
CVE-2009-3821
Apache Solr Search for TYPO3 vulnerable to Cross-site Scripting
Medium
CVE-2009-3818
freeCap CAPTCHA extension for TYPO3 has vulnerability in the session handling feature
High
CVE-2009-3695
Algorithmic complexity vulnerability in the forms library in Django 1.0 before 1.0.4 and 1.1 before 1.1.1 allows remote attackers to cause a denial of service (CPU consumption) via a crafted (1) Email
Medium
CVE-2009-3696
phpMyAdmin Cross-site Scripting In MySQL Table Name
Medium
CVE-2009-3635
TYPO3 Install Tool Subcomponent Allows Access Using Only a Password's MD5 Hash as a Credential
Medium
CVE-2009-3636
Typo3 API Install Tool vulnerable to Cross-site Scripting
Medium
CVE-2009-3633
TYPO3 API function vulnerable to Cross-site Scripting
High
CVE-2009-3631
TYPO3 Backend Command Injection via Shell Metacharacters in Uploaded File Name
Medium
CVE-2009-3630
TYPO3 Backend vulnerable to Frame Hijacking
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.