Low
CVE-2009-3629
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Medium
CVE-2009-3628
TYPO3 Backend Discloses Encryption Key
Critical
CVE-2009-3555
Apache Tomcat affected by vulnerability in TLS and SSL protocol
High
CVE-2009-2940
The pygresql module 3.8.1 and 4.0 for Python does not properly support the PQescapeStringConn function, which might allow remote attackers to leverage escaping issues involving multibyte character enc
Medium
CVE-2009-2902
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Apache Tomcat
Medium
CVE-2009-2901
Improper Authentication in Apache Tomcat
Critical
CVE-2009-2701
Unspecified vulnerability in the Zope Enterprise Objects (ZEO) storage-server functionality in Zope Object Database (ZODB) 3.8 before 3.8.3 and 3.9.x before 3.9.0c2, when certain ZEO database sharing
Medium
CVE-2009-2693
Apache Tomcat Directory Traversal vulnerability
High
CVE-2009-2659
The Admin media handler in core/servers/basehttp.py in Django 1.0 and 0.96 does not properly map URL requests to expected "static media files," which allows remote attackers to conduct directory trave
Medium
CVE-2009-1595
Ignite Realtime Openfire Allows Users to Change Passwords of Arbitrary Accounts
Medium
CVE-2009-1523
Directory traversal in Mort Bay Jetty
Medium
CVE-2009-1482
Multiple cross-site scripting (XSS) vulnerabilities in action/AttachFile.py in MoinMoin 1.8.2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) an AttachFile sub-action
Medium
CVE-2009-1275
Apache Tiles Vulnerable to XSS via EL Expression Injection
High
CVE-2009-1264
Frontend User Registration extension for TYPO3 does not properly verify access rights
Medium
CVE-2009-1190
Spring Framework Inefficient Regular Expression Complexity
High
CVE-2009-1149
phpMyAdmin HTTP Response Splitting Vulnerability
Medium
CVE-2009-0816
Typo3 Backend XSS Vulnerability
Medium
CVE-2009-0815
TYPO3 leaks a hash secret in an error message
Medium
CVE-2009-0783
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
Medium
CVE-2009-0781
Cross-site scripting in Apache Tomcat
High
CVE-2009-0669
Zope Object Database (ZODB) before 3.8.2, when certain Zope Enterprise Objects (ZEO) database sharing is enabled, allows remote attackers to bypass authentication via vectors involving the ZEO network
Critical
CVE-2009-0668
Unspecified vulnerability in Zope Object Database (ZODB) before 3.8.2, when certain Zope Enterprise Objects (ZEO) database sharing is enabled, allows remote attackers to execute arbitrary Python code
Medium
CVE-2009-0580
Exposure of Sensitive Information in Apache Tomcat
High
CVE-2009-0258
Indexed Search Engine for TYPO3 Command Execution via Metacharacter Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.