High
CVE-2009-0256
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Medium
CVE-2009-0217
Apache XML Security For Java vulnerable to authentication bypass by HMAC truncation
Medium
CVE-2009-0039
Apache Geronimo Application Server CSRF vulnerabilities
Medium
CVE-2009-0038
Apache Geronimo Application Server multiple cross-site scripting (XSS) vulnerabilities
Medium
CVE-2009-0033
Apache Tomcat Denial of Service via Malformed Request Headers
Medium
CVE-2009-0026
Apache Jackrabbit contains Cross-site Scripting
High
CVE-2008-4524
AdaptCMS SQL Injection vulnerability
Low
CVE-2008-4308
Apache Tomcat information disclosure vulnerability
Medium
CVE-2008-4104
Joomla! Open Redirect vulnerability
High
CVE-2008-3909
The administration application in Django 0.91, 0.95, and 0.96 stores unauthenticated HTTP POST requests and processes them after successful authentication occurs, which allows remote attackers to cond
Critical
CVE-2022-0781
Nirweb support <= 2.7.9 - SQL Injection
Medium
CVE-2022-1298
Tabs Responsive <= 2.2.7 - Editor+ Stored Cross-Site Scripting
High
CVE-2022-1556
StaffList <= 3.1.2 - Authenticated SQL Injection
Medium
CVE-2022-1093
WP Meta SEO <= 4.4.6 - Admin+ Stored Cross-Site Scripting via breadcrumbs
Critical
CVE-2022-1014
WP Contacts Manager <= 2.2.4 - Unauthenticated SQL Injection
Medium
CVE-2022-1547
Check & Log email <= 1.0.5 - Reflected Cross-Site Scripting
Medium
CVE-2022-0346
XML Sitemap Generator for Google <= 2.0.3 - Reflected Cross-Site Scripting
Medium
CVE-2008-3381
Multiple cross-site scripting (XSS) vulnerabilities in macro/AdvancedSearch.py in moin (and MoinMoin) 1.6.3 and 1.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vect
Medium
CVE-2008-3328
Cross-site scripting (XSS) vulnerability in the wiki engine in Trac before 0.10.5 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
Medium
CVE-2008-3228
Joomla! doesn't configure .htaccess to apply certain security checks that "block common exploits" to SEF URLs
High
CVE-2008-3227
Joomla! Open Redirect vulnerability
Medium
CVE-2008-3226
Joomla! allows attackers to access cached pages
Medium
CVE-2008-3218
Drupal vulnerable to Cross-site Scripting
Medium
CVE-2008-3032
phpMyAdmin extension for TYPO3 has Cross-site Scripting vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.