🌐

Webアプリケーション

slug: web-application

🛡 関連する脆弱性 320

ID	タイトル	重要度	検知
CVE-2024-27289	pgx is a PostgreSQL driver and toolkit for Go. Prior to version 4.18.2, SQL injection can occur when all of the following conditions are met: the non-default simple protocol is used; a placeholder for...	High	2年前
CVE-2022-27224	An issue was discovered in Galleon NTS-6002-GPS 4.14.103-Galleon-NTS-6002.V12 4. An authenticated...	High	4年前
CVE-2021-41164	Advanced Content Filter (ACF) vulnerability allowing to execute JavaScript code using malformed HTML	High	4年前
CVE-2020-7564	schneider-electric の脆弱性 (CVE-2020-7564)	High	5年前
CVE-2020-11111	jackson-databind mishandles the interaction between serialization gadgets and typing	High	6年前
CVE-2020-11112	jackson-databind mishandles the interaction between serialization gadgets and typing	High	6年前
CVE-2020-11113	jackson-databind mishandles the interaction between serialization gadgets and typing	High	6年前
CVE-2020-10969	jackson-databind mishandles the interaction between serialization gadgets and typing	High	6年前
CVE-2020-10968	jackson-databind mishandles the interaction between serialization gadgets and typing	High	6年前
CVE-2020-10672	jackson-databind mishandles the interaction between serialization gadgets and typing	High	6年前
CVE-2020-10673	FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to com.caucho.config.types.ResourceRef (aka caucho-quercus).	High	6年前
CVE-2017-14852	An insecure communication was found between a user and the Orpak SiteOmat management console for...	High	7年前
CVE-2018-1258	Spring Framework version 5.0.5 when used in combination with any versions of Spring Security contains an authorization bypass when using method security. An unauthorized malicious user can gain unauth...	High	8年前
CVE-2017-9413	Multiple cross-site request forgery (CSRF) vulnerabilities in the Podcast feature in Subsonic 6.1.1 allow remote attackers to hijack the authentication of users for requests that (1) subscribe to a po...	High	9年前
CVE-2015-1332	The oxide::JavaScriptDialogManager function in oxide-qt before 1.9.1 as packaged in Ubuntu 15.04 and Ubuntu 14.04 allows remote attackers to cause a denial of service (application crash) or execute ar...	High	9年前
CVE-2017-11422	Statamic framework before 2.6.0 does not correctly check a session's permissions when the methods from a user's class are called. Problematic methods include reset password, create new account, create...	High	9年前
CVE-2017-1371	Builder tools running in the IBM TRIRIGA Application Platform 3.3, 3.4, and 3.5 contains a vulnerability that could allow an authenticated user to execute Builder tool actions they do not have access...	High	9年前
CVE-2015-3638	phpMyBackupPro before 2.5 does not validate integer input, which allows remote authenticated users to execute arbitrary PHP code by injecting scripts via the path, filename, and period parameters to s...	High	9年前
CVE-2009-2493	The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005...	High	17年前
CVE-2009-0901	The Active Template Library (ATL) in Microsoft Visual Studio .NET 2003 SP1, Visual Studio 2005...	High	17年前