Medium
CVE-2018-1332
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,072
Reset filters
High
CVE-2018-1331
Code execution in org.apache.storm:storm-core
High
CVE-2017-9799
Apache Storm it is possible for the owner of a topology to trick the supervisor to launch a worker as a different, non-root, user
Critical
CVE-2018-15531
JavaMelody has XXE via parseSoapMethodName in bull/javamelody/PayloadNameRequestWrapper.java.
Medium
CVE-2018-11797
In Apache PDFBox a carefully crafted PDF file can trigger an extremely long running computation
High
CVE-2016-2175
High severity vulnerability that affects org.apache.pdfbox:pdfbox
Critical
CVE-2018-18389
Incorrect access control in Neo4j Enterprise Database Server via LDAP authentication
High
CVE-2018-1274
Spring Data Commons contain a property path parser vulnerability caused by unlimited resource allocation
High
CVE-2018-1259
Spring Data Commons, used in combination with XMLBeam, contains a property binder vulnerability caused by improper restriction of XML external entity references
Critical
Exploited in attacks
CVE-2018-1273
Spring Data Commons remote code injection vulnerability
Medium
CVE-2017-7677
Moderate severity vulnerability that affects org.apache.ranger:ranger
Critical
CVE-2017-7676
Policy resource matcher in Apache Ranger before 0.7.1 ignores characters after '' wildcard character
High
CVE-2018-11778
UnixAuthenticationService in Apache Ranger was updated to correctly handle user input to avoid Stack-based buffer overflow
Medium
CVE-2016-8746
Apache Ranger policy engine incorrectly matches paths in certain conditions
Medium
CVE-2016-8751
Apache Ranger admin users can store some arbitrary javascript code to be executed when normal users login and access policies
Medium
CVE-2016-6815
Moderate severity vulnerability that affects org.apache.ranger:ranger
Medium
CVE-2016-5395
Apache Ranger allows remote authenticated administrators to inject arbitrary web script or HTML
High
CVE-2016-2174
SQL injection vulnerability in the policy admin tool in Apache Ranger
Critical
CVE-2016-0733
The Admin UI in Apache Ranger before 0.5.1 does not properly handle authentication requests that lack a password
Medium
CVE-2018-8037
Apache Tomcat Race Condition vulnerability
High
CVE-2018-8034
The host name verification missing in Apache Tomcat
Critical
CVE-2018-8014
The defaults settings for the CORS filter provided in Apache Tomcat are insecure and enable 'supportsCredentials' for all origins
High
CVE-2018-1336
In Apache Tomcat there is an improper handing of overflow in the UTF-8 decoder
Medium
CVE-2018-1305
Apache Tomcat information exposure vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.