Medium
CVE-2017-3166
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filters
Critical
CVE-2018-1000844
XML External Entity (XXE) vulnerability in Square Retrofit
High
CVE-2018-1000850
Directory Traversal vulnerability in Square Retrofit
Medium
CVE-2018-1000873
Moderate severity vulnerability that affects com.fasterxml.jackson.datatype:jackson-datatype-jsr353
Critical
CVE-2018-1000854
Remote Code Execution in esigate-core
Critical
CVE-2018-1000836
XML External Entity (XXE) vulnerability in bw-calendar-engine
High
CVE-2018-17195
Cleartext Transmission of Sensitive Information in Apache nifi
High
CVE-2018-17194
Apache NiFi Improper Input Validation vulnerability
Critical
CVE-2018-1000823
exist-db:exist-core XML External Entity (XXE) vulnerability
Critical
CVE-2018-1000822
XML External Entity (XXE) vulnerability in codelibs fess
Critical
CVE-2018-1000820
XML External Entity (XXE) vulnerability in neo4j.procedure:apoc
High
CVE-2018-15801
Spring Security vulnerable to Authorization Bypass
High
CVE-2018-15795
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Pivotal CredHub Service Broker
High
CVE-2018-11777
Improper Authentication in hive:hive-exec
Medium
CVE-2018-1314
Moderate severity vulnerability that affects org.apache.hive:hive-jdbc
Low
CVE-2014-0228
Low severity vulnerability that affects org.apache.hive:hive-exec, org.apache.hive:hive, and org.apache.hive:hive-service
Critical
CVE-2017-18239
Exposure of Sensitive information in authentikat-jwt
High
CVE-2015-2080
Jetty vulnerable to exposure of sensitive information to unauthenticated remote users
Critical
CVE-2018-1337
Credential leak in org.apache.directory.api:apache-ldap-api
Medium
CVE-2017-7678
Moderate severity vulnerability that affects org.apache.spark:spark-core_2.10 and org.apache.spark:spark-core_2.11
Medium
CVE-2018-17184
Improper Control of Interaction Frequency in Apache syncope-core
High
CVE-2018-15758
Authorization bypass in org.springframework.security.oauth:spring-security-oauth2
Medium
CVE-2017-2666
Undertow-core vulnerable to HTTP Request Smuggling
Critical
CVE-2018-1000644
Eclipse RDF4j vulnerable to XML External Entity
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.