Medium
CVE-2018-13055
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
High
CVE-2018-1999035
Jenkins Inedo BuildMaster Plugin globally and unconditionally disabled SSL/TLS certificate validation
High
CVE-2018-1999034
Jenkins Inedo ProGet Plugin globally and unconditionally disabled SSL/TLS certificate validation
Medium
CVE-2018-1000605
Jenkins CollabNet Plugin man in the middle vulnerability
Critical
CVE-2017-15367
Bacula-web SQL Injection Vulnerabilities
Medium
CVE-2011-0533
Apache Continuum and Archiva vulnerable to Cross-site Scripting
High
CVE-2011-0534
Apache Tomcat does not enforce the maxHttpHeaderSize limit
Medium
CVE-2011-1088
Apache Tomcat allows remote attackers to bypass intended access restrictions
Medium
CVE-2011-1183
Access controll bypass in Apache Tomcat
Medium
CVE-2011-1582
Access restriction bypass in Apache Tomcat
Medium
CVE-2011-2088
XWork in Apache Struts Reveals Sensitive Information
High
CVE-2011-2508
phpMyAdmin Directory Traversal vulnerability
High
CVE-2011-2506
phpMyAdmin vulnerable to static code injection
Medium
CVE-2011-2505
phpMyAdmin remote variable manipulation
Medium
CVE-2011-2894
Spring Framework and Spring Security vulnerable to Deserialization of Untrusted Data
High
CVE-2013-4200
The isURLInPortal method in the URLTool class in in_portal.py in Plone 2.1 through 4.1, 4.2.x through 4.2.5, and 4.3.x through 4.3.1 treats URLs starting with a space as a relative URL, which allows r
Medium
CVE-2013-5855
Improper Neutralization of Input During Web Page Generation in Mojarra
Medium
CVE-2013-6235
Improper Neutralization of Input During Web Page Generation in JAMon
Low
CVE-2013-6480
Libcloud 0.12.3 through 0.13.2 does not set the scrub_data parameter for the destroy DigitalOcean API, which allows local users to obtain sensitive information by leveraging a new VM.
Medium
CVE-2014-2383
DOMPDF Arbitrary File Read
Medium
CVE-2014-3503
Apache Syncope uses a weak PNRG
Medium
CVE-2014-6439
Cross-site scripting in Elasticsearch
Medium
CVE-2014-7809
Cross-Site Request Forgery in Apache Struts
High
CVE-2015-0225
Improper Neutralization of Special Elements used in a Command in Apache Cassandra
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.