High
CVE-2018-1259
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Critical
Exploited in attacks
CVE-2018-1273
Spring Data Commons remote code injection vulnerability
Medium
CVE-2017-7677
Moderate severity vulnerability that affects org.apache.ranger:ranger
Critical
CVE-2017-7676
Policy resource matcher in Apache Ranger before 0.7.1 ignores characters after '' wildcard character
High
CVE-2018-11778
UnixAuthenticationService in Apache Ranger was updated to correctly handle user input to avoid Stack-based buffer overflow
Medium
CVE-2016-8746
Apache Ranger policy engine incorrectly matches paths in certain conditions
Medium
CVE-2016-8751
Apache Ranger admin users can store some arbitrary javascript code to be executed when normal users login and access policies
Medium
CVE-2016-6815
Moderate severity vulnerability that affects org.apache.ranger:ranger
Medium
CVE-2016-5395
Apache Ranger allows remote authenticated administrators to inject arbitrary web script or HTML
High
CVE-2016-2174
SQL injection vulnerability in the policy admin tool in Apache Ranger
Critical
CVE-2016-0733
The Admin UI in Apache Ranger before 0.5.1 does not properly handle authentication requests that lack a password
Medium
CVE-2018-8037
Apache Tomcat Race Condition vulnerability
High
CVE-2018-8034
The host name verification missing in Apache Tomcat
Critical
CVE-2018-8014
The defaults settings for the CORS filter provided in Apache Tomcat are insecure and enable 'supportsCredentials' for all origins
High
CVE-2018-1336
In Apache Tomcat there is an improper handing of overflow in the UTF-8 decoder
Medium
CVE-2018-1305
Apache Tomcat information exposure vulnerability
Medium
CVE-2018-1304
Apache Tomcat unauthorized access vulnerability
Medium
CVE-2018-11784
Apache Tomcat Open Redirect vulnerability
High
Exploited in attacks
CVE-2017-12615
When running Apache Tomcat on Windows with HTTP PUTs enabled it was possible to upload a JSP file to the server
Unrated
drupal-contrib-2018-067
drupal/workbench_moderation - SA-CONTRIB-2018-067
Medium
CVE-2015-7940
Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15
High
CVE-2016-1000352
In Bouncy Castle JCE Provider the ECIES implementation allowed the use of ECB mode
Low
CVE-2016-1000346
In Bouncy Castle JCE Provider the other party DH public key is not fully validated
High
CVE-2016-1000343
In Bouncy Castle JCE Provider the DSA key pair generator generates a weak private key if used with default values
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.