High
CVE-2017-14063
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,072
Reset filters
High
CVE-2017-1000498
Android SVG vulnerable to XML External Entity (XXE)
High
CVE-2017-1000208
Deserialization of Untrusted Data in swagger-parser
High
CVE-2017-1000207
Deserialization of Untrusted Data in swagger-codegen
Medium
CVE-2018-1000529
Stored Cross Site Scripting in Grails Fields Plugin
High
CVE-2018-11775
Improper Certificate Validation in Apache activemq-client
High
CVE-2018-1307
Apache juddi-client vulnerable to XML External Entity (XXE)
Medium
CVE-2018-1298
Moderate severity vulnerability that affects org.apache.qpid:apache-qpid-broker-j
Medium
CVE-2018-11771
Moderate severity vulnerability that affects org.apache.commons:commons-compress
High
CVE-2017-15701
Apache Qpid Broker-J vulnerable to Denial of Service (DoS) via uncontrolled resource consumption
Critical
CVE-2017-15702
Apache Qpid Broker vulnerable to authentication port spoofing
High
CVE-2018-8039
Apache CXF TLS hostname verification does not work correctly with com.sun.net.ssl.*
High
CVE-2016-4216
Moderate severity vulnerability that affects com.adobe.xmp:xmpcore
Critical
CVE-2017-7658
Jetty vulnerable to authorization bypass due to inconsistent HTTP request handling (HTTP Request Smuggling)
High
CVE-2017-7656
Jetty vulnerable to cache poisoning due to inconsistent HTTP request handling (HTTP Request Smuggling)
Critical
CVE-2016-4800
Jetty contains an alias issue that could allow unauthenticated remote code execution due to specially crafted request
Medium
CVE-2018-12536
Eclipse Jetty Server generates error message containing sensitive information
High
CVE-2017-9735
Jetty vulnerable to exposure of sensitive information due to observable discrepancy
Critical
CVE-2017-7657
Critical severity vulnerability that affects org.eclipse.jetty:jetty-server
High
Exploited in attacks
CVE-2018-11776
Apache Struts vulnerable to remote command execution (RCE) due to improper input validation
Critical
Exploited in attacks
CVE-2017-5638
Apache Struts vulnerable to remote arbitrary command execution due to improper input validation
High
CVE-2016-4977
Spring Security OAuth vulnerable to remote code execution (RCE) via specially crafted request using whitelabel views
Medium
CVE-2018-11087
Moderate severity vulnerability that affects com.rabbitmq:amqp-client and org.springframework.amqp:spring-amqp
Medium
CVE-2018-1196
Moderate severity vulnerability that affects org.springframework.boot:spring-boot
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.