Medium
CVE-2013-3060
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filters
Medium
CVE-2014-5325
Exposure of Sensitive Information to an Unauthorized Actor in Direct Web Remoting
Medium
CVE-2015-1776
Exposure of Sensitive Information to an Unauthorized Actor in Apache Hadoop
Medium
CVE-2015-1796
Improper Certificate Validation in Shibboleth Identity Provider and OpenSAML
Medium
CVE-2010-1622
Improper Control of Generation of Code ('Code Injection') in Spring Framework
Medium
CVE-2015-6524
Improper Input Validation in Apache ActiveMQ
Low
CVE-2013-2192
Improper Authentication in Apache Hadoop
Medium
CVE-2012-1574
Apache Hadoop allows impersonation of arbitrary cluster user accounts
Medium
CVE-2016-4976
Apache Ambari reveals administrator passwords
Low
CVE-2013-2071
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
High
CVE-2017-7669
Apache Hadoop's LinuxContainerExecutor runs docker commands as root with insufficient input validation
Medium
CVE-2016-5004
ws-xmlrpc DoS Vulnerability
Medium
CVE-2017-7665
Cross-site Scripting in Apache NiFi
High
CVE-2017-7683
Apache OpenMeetings displays Tomcat version and detailed error stack trace
Critical
CVE-2017-1000362
Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
High
CVE-2015-3198
The Undertow module of WildFly allows source code disclosure
High
CVE-2011-2730
Improper Neutralization of Directives in Dynamically Evaluated Code in Spring Framework
Medium
CVE-2017-12646
Liferay Portal XSS Vulnerability
High
CVE-2017-9801
Improper Input Validation in Apache Commons Email
Medium
CVE-2016-10404
Liferay Portal Vulnerable to XSS via a Crafted Redirect Field
Medium
CVE-2011-1419
Apache Tomcat does not follow ServletSecurity annotations
Medium
CVE-2012-5785
Apache Axis2 has Improper Input Validation
High
CVE-2012-5817
Improper Input Validation in XFire
Low
CVE-2013-5573
Jenkins allows Cross-Site Scripting (XSS) in User Configuration
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.