Medium
CVE-2015-3192
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2015-0201
Moderate severity vulnerability that affects org.springframework:spring-core
Critical
CVE-2018-1275
Spring Framework has Improperly Implemented Security Check for Standard
High
CVE-2018-1272
Possible privilege escalation in org.springframework:spring-core
Medium
CVE-2018-1271
Path Traversal in org.springframework:spring-core
Critical
CVE-2018-1270
Spring Framework allows applications to expose STOMP over WebSocket endpoints
High
CVE-2018-1258
Spring Framework when used in combination with any versions of Spring Security contains an authorization bypass
Medium
CVE-2018-1257
Denial of Service in org.springframework:spring-core
Medium
CVE-2018-1199
Improper Input Validation in org.springframework.security:spring-security-core, org.springframework.security:spring-security-core , and org.springframework:spring-core
Critical
CVE-2017-12629
Remote code execution occurs in Apache Solr
Medium
CVE-2018-8010
There is a XML external entity expansion (XXE) vulnerability in Apache Solr config files
High
CVE-2018-1308
There is a XML external entity expansion (XXE) vulnerability in Apache Solr
Medium
CVE-2018-8026
XML external entity expansion in org.apache.solr:solr-core
High
CVE-2018-17297
Unzip function in ZipUtil.java in Hutool allows remote attackers to overwrite arbitrary files via directory traversal
Medium
CVE-2018-8023
Moderate severity vulnerability that affects org.apache.mesos:mesos
High
CVE-2018-17785
In blynk-server a Directory Traversal exists
Medium
CVE-2018-1332
Moderate severity vulnerability that affects org.apache.storm:storm-core
High
CVE-2018-1331
Code execution in org.apache.storm:storm-core
High
CVE-2017-9799
Apache Storm it is possible for the owner of a topology to trick the supervisor to launch a worker as a different, non-root, user
Critical
CVE-2018-15531
JavaMelody has XXE via parseSoapMethodName in bull/javamelody/PayloadNameRequestWrapper.java.
Medium
CVE-2018-11797
In Apache PDFBox a carefully crafted PDF file can trigger an extremely long running computation
High
CVE-2016-2175
High severity vulnerability that affects org.apache.pdfbox:pdfbox
Critical
CVE-2018-18389
Incorrect access control in Neo4j Enterprise Database Server via LDAP authentication
High
CVE-2018-1274
Spring Data Commons contain a property path parser vulnerability caused by unlimited resource allocation
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.