Medium
CVE-2017-2582
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filters
Medium
CVE-2017-2585
keycloak-core vulnerable to timing attacks against JWS token verification
High
CVE-2017-3163
Improper Limitation of a Pathname ('Path Traversal') in org.apache.solr:solr-core
High
CVE-2016-5007
Spring Security and Spring Framework may not recognize certain paths that should be protected
High
CVE-2018-1258
Spring Framework when used in combination with any versions of Spring Security contains an authorization bypass
Medium
CVE-2018-1199
Improper Input Validation in org.springframework.security:spring-security-core, org.springframework.security:spring-security-core , and org.springframework:spring-core
Critical
CVE-2017-12629
Remote code execution occurs in Apache Solr
High
CVE-2018-1308
There is a XML external entity expansion (XXE) vulnerability in Apache Solr
Medium
CVE-2018-8023
Moderate severity vulnerability that affects org.apache.mesos:mesos
High
CVE-2018-1274
Spring Data Commons contain a property path parser vulnerability caused by unlimited resource allocation
High
CVE-2018-1259
Spring Data Commons, used in combination with XMLBeam, contains a property binder vulnerability caused by improper restriction of XML external entity references
Critical
Exploited in attacks
CVE-2018-1273
Spring Data Commons remote code injection vulnerability
Medium
CVE-2016-8746
Apache Ranger policy engine incorrectly matches paths in certain conditions
Medium
CVE-2018-8037
Apache Tomcat Race Condition vulnerability
Medium
CVE-2018-1305
Apache Tomcat information exposure vulnerability
Medium
CVE-2018-1304
Apache Tomcat unauthorized access vulnerability
High
Exploited in attacks
CVE-2017-12615
When running Apache Tomcat on Windows with HTTP PUTs enabled it was possible to upload a JSP file to the server
Medium
CVE-2015-7940
Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15
Low
CVE-2016-1000346
In Bouncy Castle JCE Provider the other party DH public key is not fully validated
High
CVE-2016-1000343
In Bouncy Castle JCE Provider the DSA key pair generator generates a weak private key if used with default values
Medium
CVE-2016-1000341
Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15
Critical
CVE-2018-1000613
Deserialization of Untrusted Data in Bouncy castle
Medium
CVE-2018-12544
Moderate severity vulnerability that affects io.vertx:vertx-core
High
CVE-2012-6153
Improper certificate validation in org.apache.httpcomponents:httpclient
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.