Medium Severity Vulnerabilities

Found 8230 vulnerabilities at Medium severity.

Vulnerability Name

CVE

CWE

Severity

YOURLS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-8488)

CVE-2014-8488

CWE-707

Medium

MODX Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-8773)

CVE-2014-8773

CWE-352

Medium

MODX Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-8774)

CVE-2014-8774

CWE-707

Medium

MODX Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-8775)

CVE-2014-8775

CWE-200

Medium

ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-8793)

CVE-2014-8793

CWE-707

Medium

ReviveAdserver Other Vulnerability (CVE-2014-8875)

CVE-2014-8875

-

Medium

phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-8958)

CVE-2014-8958

CWE-707

Medium

phpMyAdmin Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2014-8959)

CVE-2014-8959

CWE-22

Medium

phpMyAdmin Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2014-8961)

CVE-2014-8961

CWE-22

Medium

MODX Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-8992)

CVE-2014-8992

CWE-707

Medium

Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-9015)

CVE-2014-9015

CWE-264

Medium

Drupal CVE-2014-9016 Vulnerability (CVE-2014-9016)

CVE-2014-9016

-

Medium

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9031)

CVE-2014-9031

CWE-707

Medium

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9032)

CVE-2014-9032

CWE-707

Medium

WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-9033)

CVE-2014-9033

CWE-352

Medium

WordPress Data Processing Errors Vulnerability (CVE-2014-9034)

CVE-2014-9034

-

Medium

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9035)

CVE-2014-9035

CWE-707

Medium

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9036)

CVE-2014-9036

CWE-707

Medium

WordPress Cryptographic Issues Vulnerability (CVE-2014-9037)

CVE-2014-9037

-

Medium

WordPress Improper Input Validation Vulnerability (CVE-2014-9038)

CVE-2014-9038

CWE-20

Medium

WordPress 7PK - Security Features Vulnerability (CVE-2014-9039)

CVE-2014-9039

-

Medium

ownCloud Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-9041)

CVE-2014-9041

CWE-352

Medium

ownCloud Improper Authentication Vulnerability (CVE-2014-9043)

CVE-2014-9043

CWE-287

Medium

ownCloud Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-9044)

CVE-2014-9044

CWE-200

Medium

ownCloud Improper Authentication Vulnerability (CVE-2014-9045)

CVE-2014-9045

CWE-287

Medium

ownCloud Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-9046)

CVE-2014-9046

CWE-200

Medium

ownCloud CVE-2014-9047 Vulnerability (CVE-2014-9047)

CVE-2014-9047

-

Medium

ownCloud Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-9048)

CVE-2014-9048

CWE-264

Medium

ownCloud Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-9049)

CVE-2014-9049

CWE-200

Medium

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9059)

CVE-2014-9059

CWE-707

Medium

Moodle Improper Input Validation Vulnerability (CVE-2014-9060)

CVE-2014-9060

CWE-20

Medium

OpenVPN AS Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-9104)

CVE-2014-9104

CWE-352

Medium

phpMyAdmin Resource Management Errors Vulnerability (CVE-2014-9218)

CVE-2014-9218

-

Medium

phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9219)

CVE-2014-9219

CWE-707

Medium

MyBB Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9241)

CVE-2014-9241

CWE-707

Medium

MediaWiki Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-9276)

CVE-2014-9276

CWE-352

Medium

Python Other Vulnerability (CVE-2014-9365)

CVE-2014-9365

-

Medium

ReviveAdserver Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-9407)

CVE-2014-9407

CWE-352

Medium

lightbox2 Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2014-9441)

CVE-2014-9441

CWE-352

Medium

MediaWiki Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-9476)

CVE-2014-9476

CWE-264

Medium

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9477)

CVE-2014-9477

CWE-707

Medium

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9479)

CVE-2014-9479

CWE-707

Medium

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9480)

CVE-2014-9480

CWE-707

Medium

MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-9481)

CVE-2014-9481

CWE-200

Medium

TYPO3 Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2014-9508)

CVE-2014-9508

CWE-59

Medium

concrete5 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9526)

CVE-2014-9526

CWE-707

Medium

Roundcube Multiple Cross-site Request Forgery (CSRF) Vulnerabilities (CVE-2014-9587)

CVE-2014-9587

-

Medium

b2evolution Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9599)

CVE-2014-9599

CWE-707

Medium

Jenkins 7PK - Security Features Vulnerability (CVE-2014-9634)

CVE-2014-9634

-

Medium

Apache Tomcat 7PK - Security Features Vulnerability (CVE-2014-9634)

CVE-2014-9634

-

Medium

Jenkins 7PK - Security Features Vulnerability (CVE-2014-9635)

CVE-2014-9635

-

Medium

Apache Tomcat 7PK - Security Features Vulnerability (CVE-2014-9635)

CVE-2014-9635

-

Medium

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-9652)

CVE-2014-9652

CWE-119

Medium

Vanilla Forums Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9685)

CVE-2014-9685

CWE-707

Medium

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-9709)

CVE-2014-9709

CWE-119

Medium

Tornado Observable Differences in Behavior to Error Inputs Vulnerability (CVE-2014-9720)

CVE-2014-9720

-

Medium

Squid Permissions, Privileges, and Access Controls Vulnerability (CVE-2014-9749)

CVE-2014-9749

CWE-264

Medium

ATutor Other Vulnerability (CVE-2014-9752)

CVE-2014-9752

-

Medium

Magento Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9758)

CVE-2014-9758

CWE-707

Medium

PHP Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2014-9767)

CVE-2014-9767

CWE-22

Medium

IBM RTC Other Vulnerability (CVE-2015-0112)

CVE-2015-0112

-

Medium

IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-0113)

CVE-2015-0113

CWE-200

Medium

OpenSSL Cryptographic Issues Vulnerability (CVE-2015-0204)

CVE-2015-0204

-

Medium

OpenSSL Cryptographic Issues Vulnerability (CVE-2015-0205)

CVE-2015-0205

-

Medium

OpenSSL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2015-0206)

CVE-2015-0206

CWE-119

Medium

OpenSSL Other Vulnerability (CVE-2015-0207)

CVE-2015-0207

-

Medium

OpenSSL Other Vulnerability (CVE-2015-0208)

CVE-2015-0208

-

Medium

OpenSSL Other Vulnerability (CVE-2015-0209)

CVE-2015-0209

-

Medium

Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-0211)

CVE-2015-0211

CWE-200

Medium

Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-0213)

CVE-2015-0213

CWE-352

Medium

Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-0214)

CVE-2015-0214

CWE-264

Medium

Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-0215)

CVE-2015-0215

CWE-200

Medium

Moodle Resource Management Errors Vulnerability (CVE-2015-0217)

CVE-2015-0217

-

Medium

Moodle Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2015-0218)

CVE-2015-0218

CWE-352

Medium

Django DEPRECATED: Code Vulnerability (CVE-2015-0219)

CVE-2015-0219

-

Medium