Low
CVE-2015-5318
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,728
Medium
CVE-2015-5321
Jenkins has Information Disclosure via Sidepanel Widget
Critical
CVE-2015-5254
Improper Input Validation in Apache ActiveMQ
Low
CVE-2013-4744
PHPUnit extension for TYPO3 vulnerable to Cross-site Scripting
High
CVE-2016-4879
CSRF in baserCMS 3.0.10 and earlier
High
CVE-2017-5630
PEAR core file overwrite vulnerability
Medium
CVE-2015-6748
Improper Neutralization of Input During Web Page Generation in Jsoup
High
CVE-2017-3200
GraniteDS Insecure Deserialization
High
CVE-2017-3199
GraniteDS Insecure Deserialization
Medium
CVE-2018-6464
Simditor XSS Vulnerability
High
CVE-2018-5960
SQL Injection in Zenario 7.1-7.6
High
CVE-2013-2165
Remote code execution due to insecure deserialization
High
CVE-2019-10867
Pimcore Unserialize Remote Code Execution
High
CVE-2014-7808
Apache Wicket insecure defaults
High
CVE-2018-3831
Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch
High
CVE-2017-8342
Radicale before 1.1.2 and 2.x before 2.0.0rc2 is prone to timing oracles and simple brute-force attacks when using the htpasswd authentication method.
Medium
CVE-2013-4330
Improper Control of Generation of Code in Apache Camel
High
CVE-2015-5285
CRLF injection vulnerability in Kallithea before 0.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the came_from parameter to _admin/login.
High
CVE-2015-0276
Cross-site request forgery (CSRF) vulnerability in Kallithea before 0.2.
Medium
CVE-2015-1864
Multiple cross-site scripting (XSS) vulnerabilities in the administration pages in Kallithea before 0.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) first name or (2) la
Critical
Exploited in attacks
CVE-2017-9791
Code execution in Apache Struts 1 plugin
Critical
CVE-2016-2173
Improper Input Validation in Spring AMQP
High
CVE-2014-1972
Apache Tapestry Unsafe Object Storage
High
CVE-2015-7546
OpenStack Identity Keystone and keystonemiddleware Insufficiently Protected Credentials
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.