High
CVE-2018-1321
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,073
Reset filters
Medium
CVE-2018-1322
Exposure of Sensitive Information to an Unauthorized Actor in Apache syncope-cope
Medium
CVE-2018-17184
Improper Control of Interaction Frequency in Apache syncope-core
High
CVE-2018-17186
Improper Restriction of XML External Entity Reference in org.apache.syncope:syncope-core
Critical
CVE-2018-18830
Unrestricted Upload of File with Dangerous Type in mingsoft:ms-mcms
High
CVE-2018-18831
Path Traversal in minsoft:ms-mcms
Medium
CVE-2018-8006
Apache ActiveMQ web console vulnerable to Cross-site Scripting
Critical
CVE-2018-18628
Deserialization of Untrusted Data in Pippo
Critical
CVE-2017-18349
Improper Input Validation in alilibaba:fastjson
Critical
CVE-2018-18531
Use of Insufficiently Random Values in penggle:kaptcha
High
CVE-2017-1000118
Improper Restriction of Operations within the Bounds of a Memory Buffer in akka-http-core
High
CVE-2017-1000034
Akka Java Serialization vulnerability
Critical
CVE-2018-16115
Cryptographically Weak Pseudo-Random Number Generator (PRNG) in akka-actor
High
CVE-2018-16131
High severity vulnerability that affects com.typesafe.akka:akka-http-core_2.11 and com.typesafe.akka:akka-http-core_2.12
High
CVE-2018-15758
Authorization bypass in org.springframework.security.oauth:spring-security-oauth2
Medium
CVE-2018-12537
Moderate severity vulnerability that affects io.vertx:vertx-core
Medium
CVE-2018-9159
Moderate severity vulnerability that affects com.sparkjava:spark-core
Medium
CVE-2018-1047
Improper Input Validation in org.wildfly:wildfly-undertow
Medium
CVE-2017-2666
Undertow-core vulnerable to HTTP Request Smuggling
Medium
CVE-2017-2670
Moderate severity vulnerability that affects io.undertow:undertow-core
Critical
CVE-2018-1000644
Eclipse RDF4j vulnerable to XML External Entity
Medium
CVE-2018-10936
Moderate severity vulnerability that affects org.postgresql:pgjdbc-aggregate
High
CVE-2016-10726
High severity vulnerability that affects org.dspace:dspace-xmlui
High
CVE-2017-5617
Server Side Request Forgery in svgSalamander
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.