Medium
CVE-2019-3795
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,280
Reset filters
High
CVE-2019-0225
Improper Limitation of a Pathname ('Path Traversal') in org.apache.jspwiki:jspwiki-war
Medium
CVE-2019-0224
Moderate severity vulnerability that affects org.apache.jspwiki:jspwiki-main
Critical
CVE-2019-10648
Improper Input Validation in net.sf.robocode:robocode.host allows for external service interaction
High
CVE-2018-12545
Uncontrolled Resource Consumption in org.eclipse.jetty:jetty-server
High
CVE-2018-11767
Improper Privilege Management in org.apache.hadoop:hadoop-main
Medium
CVE-2018-1324
Apache Commons Compress vulnerable to denial of service due to infinite loop
High
CVE-2016-3083
org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service vulnerable to Improper Certificate Validation
High
CVE-2018-1296
Exposure of Sensitive Information to an Unauthorized Actor in Hadoop
Medium
CVE-2018-11798
Apache Thrift Node.js static web server sandbox escape
High
CVE-2018-11787
Improper Authentication in Apache Karaf
Critical
CVE-2018-11788
XML External Entity Reference in Apache Karaf
Critical
CVE-2018-14719
Arbitrary Code Execution in jackson-databind
Critical
CVE-2018-14720
XML External Entity Reference (XXE) in jackson-databind
Critical
CVE-2018-14721
Server-Side Request Forgery (SSRF) in jackson-databind
Critical
CVE-2018-19362
com.fasterxml.jackson.core:jackson-databind vulnerable to Deserialization of Untrusted Data
Critical
CVE-2018-19361
Deserialization of Untrusted Data in jackson-databind
Critical
CVE-2018-19360
Deserialization of Untrusted Data in jackson-databind due to polymorphic deserialization
Critical
CVE-2018-14718
Arbitrary Code Execution in jackson-databind
High
CVE-2018-8009
Path Traversal in Hadoop
High
CVE-2018-11766
Arbitrary Command Execution in Hadoop
Critical
CVE-2017-15718
Exposure of Sensitive Information in Hadoop
Medium
CVE-2017-15713
Moderate severity vulnerability that affects org.apache.hadoop:hadoop-main
Medium
CVE-2017-3166
Moderate severity vulnerability that affects org.apache.hadoop:hadoop-main
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.