High
CVE-2018-3831
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,690
High
CVE-2017-8342
Radicale before 1.1.2 and 2.x before 2.0.0rc2 is prone to timing oracles and simple brute-force attacks when using the htpasswd authentication method.
Medium
CVE-2013-4330
Improper Control of Generation of Code in Apache Camel
High
CVE-2015-5285
CRLF injection vulnerability in Kallithea before 0.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the came_from parameter to _admin/login.
High
CVE-2015-0276
Cross-site request forgery (CSRF) vulnerability in Kallithea before 0.2.
Medium
CVE-2015-1864
Multiple cross-site scripting (XSS) vulnerabilities in the administration pages in Kallithea before 0.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) first name or (2) la
Critical
Exploited in attacks
CVE-2017-9791
Code execution in Apache Struts 1 plugin
Critical
CVE-2016-2173
Improper Input Validation in Spring AMQP
High
CVE-2014-1972
Apache Tapestry Unsafe Object Storage
High
CVE-2015-7546
OpenStack Identity Keystone and keystonemiddleware Insufficiently Protected Credentials
Medium
CVE-2019-1003058
CSRF vulnerability in Jenkins FTP publisher Plugin
Medium
CVE-2019-1003042
Jenkins Lockable Resources Plugin XSS vulnerability
Medium
CVE-2019-1003078
Jenkins VMware Lab Manager Slaves Plugin vulnerable CSRF vulnerability
Medium
CVE-2019-1003080
CSRF vulnerability in Jenkins OpenShift Deployer Plugin
Medium
CVE-2019-1003046
Jenkins Fortify on Demand Uploader Plugin CSRF vulnerability
Medium
CVE-2019-1003076
CSRF vulnerability in Jenkins Audit to Database Plugin
High
CVE-2019-1003044
Jenkins Slack Notification Plugin CSRF vulnerability and missing permission checks
Medium
CVE-2019-1003082
CSRF vulnerability in Jenkins Gearman Plugin
Medium
CVE-2019-1003084
CSRF vulnerability in Zephyr Enterprise Test Management Plugin
Medium
CVE-2019-1003086
CSRF vulnerability in Jenkins sinatra-chef-builder Plugin
Critical
CVE-2015-3253
Improper Neutralization of Special Elements in Output Used by a Downstream Component in Apache Groovy
Medium
CVE-2019-1003098
Jenkins OpenID Plugin CSRF vulnerability
Medium
CVE-2019-1003092
Cross-site request forgery vulnerability in Jenkins Nomad Plugin
Medium
CVE-2019-1003090
CSRF vulnerability in Jenkins SOASTA CloudTest Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.