High
CVE-2020-15252
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filters
Medium
CVE-2020-15250
TemporaryFolder on unix-like systems does not limit access to created files
Medium
CVE-2012-5784
Man-in-the-middle attack in Apache Axis
High
CVE-2020-15170
Potential access control security issue in apollo-adminservice
Low
ghsa-q3vw-4jx3-rrr2
personnummer/java vulnerable to Improper Input Validation
High
CVE-2016-9879
Security Constraint Bypass in Spring Security
Low
CVE-2020-15171
Users with SCRIPT right can execute arbitrary code in XWiki
Medium
CVE-2012-6708
Cross-Site Scripting in jquery
Medium
CVE-2020-12480
CSRF in Play Framework
Critical
CVE-2020-5413
Code execution in Spring Integration
Critical
CVE-2019-17638
Operation on a Resource after Expiration or Release in Jetty Server
Critical
CVE-2020-13926
SQL Injection in Kylin
High
ghsa-mm44-wc5p-wqhq
Denial of service due to reference expansion in versions earlier than 4.0
Medium
CVE-2019-2692
Privilege escalation in mysql-connector-jav
High
CVE-2017-7957
Denial of service in XStream
High
CVE-2015-2156
Information Exposure in Netty
High
CVE-2020-15087
Privilege escalation in Presto
High
CVE-2019-10086
Insecure Deserialization in Apache Commons Beanutils
Medium
CVE-2018-10237
Denial of Service in Google Guava
High
CVE-2017-7536
Privilege Escalation in Hibernate Validator
Critical
Exploited in attacks
CVE-2020-1938
Improper Privilege Management in Tomcat
Medium
CVE-2014-8122
Information disclosure in JBoss Weld
Critical
CVE-2019-17570
Insecure Deserialization in Apache XML-RPC
Medium
CVE-2019-17573
Reflected Cross-Site Scripting in Apache CXF
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.