Medium
CVE-2008-2951
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Medium
CVE-2008-2938
Apache Tomcat Directory Traversal vulnerability
Medium
CVE-2008-2717
TYPO3 Unrestricted File Upload vulnerability
Medium
CVE-2008-2370
Apache Tomcat Path Traversal Vulnerability
Medium
CVE-2008-2302
Cross-site scripting (XSS) vulnerability in the login form in the administration application in Django 0.91 before 0.91.2, 0.95 before 0.95.3, and 0.96 before 0.96.2 allows remote attackers to inject
Medium
CVE-2008-2025
Apache Struts Cross-site Scripting vulnerability
Medium
CVE-2008-1947
Apache Tomcat Cross-site scripting (XSS) vulnerability
High
CVE-2008-1937
The user form processing (userform.py) in MoinMoin before 1.6.3, when using ACLs or a non-empty superusers list, does not properly manage users, which allows remote attackers to gain privileges.
Low
CVE-2008-1753
Alkacon OpenCMS XSS via searchfilter parameter in system/workplace/admin/workplace/sessions.jsp
Medium
CVE-2008-1728
Ignite Realtime Openfire allows remote authenticated users to cause a denial of service
Low
CVE-2008-1510
Alkacon OpenCMS XSS via searchfilter or listSearchFilter parameter
Medium
CVE-2008-1502
Moodle vulnerable to Cross-site scripting
Critical
CVE-2008-1475
The xml-rpc server in Roundup 1.4.4 does not check property permissions, which allows attackers to bypass restrictions and edit or read restricted properties via the (1) list, (2) display, and (3) set
Medium
CVE-2008-1474
Multiple unspecified vulnerabilities in Roundup before 1.4.4 have unknown impact and attack vectors, some of which may be related to cross-site scripting (XSS).
Medium
CVE-2008-1301
Alkacon OpenCMS Absolute Path Traversal via pathname in filePath.0 parameter
Low
CVE-2008-1300
Alkacon Open CMS XSS via Logfile Viewer Settings function
Medium
CVE-2008-1285
Cross-site scripting (XSS) vulnerability in Sun Java Server Faces (JSF)
Medium
CVE-2008-1232
Apache Tomcat Cross-site scripting (XSS) vulnerability
Low
CVE-2008-1045
Alkacon OpenCMS XSS via file tree navigation in system/workplace/views/explorer/tree_files.jsp
High
CVE-2008-0299
common.py in Paramiko 1.7.1 and earlier, when using threads or forked processes, does not properly use RandomPool, which allows one session to obtain sensitive information from another session by pred
High
CVE-2008-0252
Directory traversal vulnerability in the _get_file_path function in (1) lib/sessions.py in CherryPy 3.0.x up to 3.0.2, (2) filter/sessionfilter.py in CherryPy 2.1, and (3) filter/sessionfilter.py in C
Medium
CVE-2008-0002
Apache Tomcat Sensitive Information Disclosure
High
CVE-2007-6738
pyftpdlib before 0.1.1 does not choose a random value for the port associated with the PASV command, which makes it easier for remote attackers to obtain potentially sensitive information about the nu
Medium
CVE-2007-6726
Apache Struts Dojo Plugin XSS Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.