Medium
CVE-2018-1339
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,072
Reset filters
High
CVE-2018-1335
Command injection in org.apache.tika:tika-core
High
CVE-2018-11796
Apache Tika is vulnerable to entity expansions which can lead to a denial of service attack
Medium
CVE-2015-5262
Denial of service vulnerability in org.apache.httpcomponents:httpclient
High
CVE-2012-6153
Improper certificate validation in org.apache.httpcomponents:httpclient
Medium
CVE-2014-3577
Improper Verification of Cryptographic Signature in org.apache.httpcomponents:httpclient
Medium
CVE-2014-1868
Moderate severity vulnerability that affects org.restlet.jse:org.restlet
High
CVE-2017-14868
Restlet Framework Ja-rs extension is vulnerable to XXE when using SimpleXMLProvider
High
CVE-2017-14949
Restlet Framework allows remote attackers to access arbitrary files via a crafted REST API HTTP request
Medium
CVE-2018-12418
Junrar vulnerable to Infinite Loop
High
CVE-2014-0003
Apache Camel's XSLT component allows remote attackers to execute arbitrary Java methods
High
CVE-2014-0002
Apache Camel's XSLT component allows remote attackers to read arbitrary files
High
CVE-2017-5643
Apache Camel's Validation Component is vulnerable against SSRF via remote DTDs and XXE.
Critical
CVE-2016-8749
Apache Camel's Jackson and JacksonXML unmarshalling operation are vulnerable to Remote Code Execution attacks
High
CVE-2015-5348
Apache Camel can allow remote attackers to execute arbitrary commands
Critical
CVE-2015-5344
Camel-xstream component in Apache Camel can allow remote attackers to execute arbitrary commands
Medium
CVE-2015-0264
Apache Camel allows remote actor to read arbitrary files via external entity in invalid XML string or GenericFile object
Medium
CVE-2015-0263
Apache Camel XML External Entity vulnerability
Medium
CVE-2018-8041
Apache Camel's Mail is vulnerable to path traversal
Critical
CVE-2018-8027
Apache is vulnerable to XXE in XSD validation processor
Critical
CVE-2017-12634
Camel-castor component in Apache Camel is vulnerable to Java object de-serialisation
Critical
CVE-2018-8018
Code execution via deserialization in org.apache.ignite:ignite-core
Critical
CVE-2018-1295
Apache serialization mechanism does not have a list of classes allowed for serialization/deserialization
Medium
CVE-2016-6805
Moderate severity vulnerability that affects org.apache.ignite:ignite-core
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.