Medium
CVE-2007-1406
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Medium
CVE-2007-1355
Apache Tomcat Vulnerable to Cross-Site Scripting
Low
CVE-2007-1358
Apache Tomcat XSS In Accept-Language Headers
Medium
CVE-2007-0660
DotNetNuke Vulnerable to XSS in Pass-Through Values
Medium
CVE-2007-0450
Apache Tomcat Directory Traversal
High
CVE-2007-0185
Direct Web Remoting vulnerable to Denial of Service
High
CVE-2007-0184
Incorrect Authorization in Getahead Direct Web Remoting
Medium
CVE-2006-7223
XWiki Remote Code Execution
Medium
CVE-2006-7217
Apache Derby SQL Injection
Medium
CVE-2006-7196
Cross-site scripting in Apache Tomcat
High
CVE-2006-7197
Apache Tomcat Buffer Over-Read
Medium
CVE-2006-7195
Apache Tomcat XSS Vulnerability
Medium
CVE-2006-6969
Jetty Uses Predictable Session Identifiers
High
CVE-2006-5878
Cross-site request forgery (CSRF) vulnerability in Edgewall Trac 0.10 and earlier allows remote attackers to perform unauthorized actions as other users via unknown vectors.
Medium
CVE-2006-5031
CakePHP directory traversal vulnerability allows remote attackers to read arbitrary files
Medium
CVE-2006-4936
Moodle does not properly validate module instance id
Medium
CVE-2006-4067
Cross-site scripting (XSS) vulnerability in CakePHP
Medium
CVE-2006-3935
Alkacon OpenCMS Improper Access Control via system/workplace/views/admin/admin-main.jsp
Medium
CVE-2006-3936
Alkacon OpenCms Exposes JSP Source Code
Medium
CVE-2006-3934
Alkacon OpenCMS Absolute Path Traversal via pathname in filePath parameter
Low
CVE-2006-3933
Alkacon OpenCms XSS via unsanitized message body
Medium
CVE-2006-3835
Apache Tomcat Reveals Directories
High
CVE-2006-3695
Trac before 0.9.6 does not disable the "raw" or "include" commands when providing untrusted users with restructured text (reStructuredText) functionality from docutils, which allows remote attackers t
Medium
CVE-2006-3360
phpSysInfo allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) sequence
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.