High
CVE-2019-1010260
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,072
Reset filters
High
CVE-2019-0212
Improper Authorization in org.apache.hbase:hbase
Medium
CVE-2019-0224
Moderate severity vulnerability that affects org.apache.jspwiki:jspwiki-main
High
CVE-2019-0222
Improper Control of Generation of Code ('Code Injection') in org.apache.activemq:activemq-client
Critical
CVE-2019-10648
Improper Input Validation in net.sf.robocode:robocode.host allows for external service interaction
High
CVE-2018-12545
Uncontrolled Resource Consumption in org.eclipse.jetty:jetty-server
High
CVE-2018-12022
jackson-databind Deserialization of Untrusted Data vulnerability
High
CVE-2018-11767
Improper Privilege Management in org.apache.hadoop:hadoop-main
Medium
CVE-2019-0191
Moderate severity vulnerability that affects org.apache.karaf:apache-karaf and org.apache.karaf:karaf
Medium
CVE-2018-1324
Apache Commons Compress vulnerable to denial of service due to infinite loop
Medium
CVE-2018-1334
In Apache Spark 1.0.0 to 2.1.2, 2.2.0 to 2.2.1, and 2.3.0, when using PySpark or SparkR, it's possible for a different local user to connect to the Spark application and impersonate the user running t
Medium
CVE-2018-8024
Exposure of Sensitive Information to an Unauthorized Actor in Apache Spark via crafted URL
High
CVE-2015-1772
Improper Authentication in org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service
High
CVE-2016-3083
org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service vulnerable to Improper Certificate Validation
Medium
CVE-2017-12625
Moderate severity vulnerability that affects org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service
High
CVE-2017-3164
Server-Side Request Forgery (SSRF) in org.apache.solr:solr-core
Critical
CVE-2019-0192
Critical severity vulnerability that affects org.apache.solr:solr-core
Medium
CVE-2019-3778
spring-security-oauth and spring-security-oauth2 Open Redirect vulnerability
Medium
CVE-2019-9658
Moderate severity vulnerability that affects com.puppycrawl.tools:checkstyle
High
CVE-2019-0200
Improper Input Validation in Apache Qpid Broker-J
Critical
CVE-2019-0187
Unauthenticated Remote Code Execution in Apache JMeter
High
CVE-2018-11793
Stack Overflow in Apache Mesos
Critical
CVE-2019-9212
Incomplete List of Disallowed Inputs in SOFA-Hessian
Medium
CVE-2019-9142
Moderate severity vulnerability that affects org.b3log:symphony
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.