Medium
CVE-2017-12882
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filters
Medium
CVE-2011-5245
Exposure of Sensitive Information to an Unauthorized Actor in RESTEasy
Medium
CVE-2012-0818
Exposure of Sensitive Information to an Unauthorized Actor in RESTEasy
Medium
CVE-2012-1006
Apache Struts Multiple Cross-site Scripting Vulnerabilities
Medium
CVE-2012-3467
Apache QPID Allows Remote Authentication Bypass
Medium
CVE-2012-4386
Cross-Site Request Forgery in Apache Struts
Medium
CVE-2012-4387
Denial of service in Apache Struts
Medium
CVE-2012-5785
Apache Axis2 has Improper Input Validation
High
CVE-2012-5817
Improper Input Validation in XFire
Medium
CVE-2012-5886
Improper Authentication in Apache Tomcat
Medium
CVE-2012-5887
Improper Authentication in Apache Tomcat
Medium
CVE-2013-1879
Improper Neutralization of Input During Web Page Generation in Apache ActiveMQ
Medium
CVE-2013-2254
Improper Restriction of Operations within the Bounds of a Memory Buffer in Apache Sling
Low
CVE-2013-5573
Jenkins allows Cross-Site Scripting (XSS) in User Configuration
Medium
CVE-2014-2059
Jenkins directory traversal vulnerability
Medium
CVE-2014-2067
Jenkins cross-site scripting (XSS) vulnerability
Medium
CVE-2014-3529
Improper Restriction of XML External Entity Reference in Apache POI
Medium
CVE-2014-3664
Jenkins Path Traversal vulnerability
Medium
CVE-2014-3574
Improper Input Validation in Apache POI
High
CVE-2016-8752
Apache Atlas versions 0.6.0 (incubating), 0.7.0 (incubating), and 0.7.1 (incubating) allow access to the webapp directory contents by pointing to URIs like /js and /img.
Medium
CVE-2017-3153
Apache Atlas versions 0.6.0-incubating and 0.7.0-incubating were found vulnerable to Reflected XSS in the search functionality.
Critical
CVE-2016-3086
Exposure of Sensitive Information to an Unauthorized Actor in Apache Hadoop
Medium
CVE-2011-1475
Apache Tomcat HTTP BIO Connector Error Discloses Information From Different Requests to Remote Users
Medium
CVE-2012-3546
Authentication Bypass in Apache Tomcat
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.