High
CVE-2017-15701
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Critical
CVE-2017-15702
Apache Qpid Broker vulnerable to authentication port spoofing
High
CVE-2018-8039
Apache CXF TLS hostname verification does not work correctly with com.sun.net.ssl.*
High
CVE-2016-4216
Moderate severity vulnerability that affects com.adobe.xmp:xmpcore
Critical
CVE-2017-7658
Jetty vulnerable to authorization bypass due to inconsistent HTTP request handling (HTTP Request Smuggling)
High
CVE-2017-7656
Jetty vulnerable to cache poisoning due to inconsistent HTTP request handling (HTTP Request Smuggling)
Critical
CVE-2016-4800
Jetty contains an alias issue that could allow unauthenticated remote code execution due to specially crafted request
Medium
CVE-2018-12536
Eclipse Jetty Server generates error message containing sensitive information
High
CVE-2017-9735
Jetty vulnerable to exposure of sensitive information due to observable discrepancy
Critical
CVE-2017-7657
Critical severity vulnerability that affects org.eclipse.jetty:jetty-server
High
Exploited in attacks
CVE-2018-11776
Apache Struts vulnerable to remote command execution (RCE) due to improper input validation
Critical
Exploited in attacks
CVE-2017-5638
Apache Struts vulnerable to remote arbitrary command execution due to improper input validation
High
CVE-2016-4977
Spring Security OAuth vulnerable to remote code execution (RCE) via specially crafted request using whitelabel views
Medium
CVE-2018-11087
Moderate severity vulnerability that affects com.rabbitmq:amqp-client and org.springframework.amqp:spring-amqp
Medium
CVE-2018-1196
Moderate severity vulnerability that affects org.springframework.boot:spring-boot
Medium
CVE-2018-1261
Path traversal in org.springframework.integration:spring-integration-zip
Critical
CVE-2018-1260
Spring Security OAuth vulnerable to remote code execution (RCE)
High
CVE-2018-8025
Race condition in org.apache.hbase:hbase-thrift
High
CVE-2015-1836
High severity vulnerability that affects org.apache.hbase:hbase
Medium
CVE-2016-1000345
Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15
High
CVE-2016-1000344
In Bouncy Castle JCE Provider the DHIES implementation allowed the use of ECB mode
High
CVE-2016-7051
jackson-dataformat-xml vulnerable to server side request forgery (SSRF)
Critical
CVE-2016-3720
jackson-dataformat-xml vulnerable to XML external entity (XXE)
Critical
CVE-2017-17485
jackson-databind vulnerable to remote code execution due to incorrect deserialization and blocklist bypass
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.