High
CVE-2017-14868
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
High
CVE-2017-14949
Restlet Framework allows remote attackers to access arbitrary files via a crafted REST API HTTP request
Medium
CVE-2018-12418
Junrar vulnerable to Infinite Loop
High
CVE-2018-15818
Repute ARForms <= 3.5.1 - Unauthenticated Arbitrary File Deletion via Path Traversal
Medium
CVE-2018-18460
WP Live Chat Support <= 8.0.15 - Cross-Site Scripting
Critical
CVE-2018-18461
Arigato Autoresponder and Newsletter <= 2.7 - Arbitrary File Upload
High
CVE-2014-0003
Apache Camel's XSLT component allows remote attackers to execute arbitrary Java methods
High
CVE-2014-0002
Apache Camel's XSLT component allows remote attackers to read arbitrary files
High
CVE-2017-5643
Apache Camel's Validation Component is vulnerable against SSRF via remote DTDs and XXE.
Critical
CVE-2016-8749
Apache Camel's Jackson and JacksonXML unmarshalling operation are vulnerable to Remote Code Execution attacks
High
CVE-2015-5348
Apache Camel can allow remote attackers to execute arbitrary commands
Critical
CVE-2015-5344
Camel-xstream component in Apache Camel can allow remote attackers to execute arbitrary commands
Medium
CVE-2015-0264
Apache Camel allows remote actor to read arbitrary files via external entity in invalid XML string or GenericFile object
Medium
CVE-2015-0263
Apache Camel XML External Entity vulnerability
Medium
CVE-2018-8041
Apache Camel's Mail is vulnerable to path traversal
Critical
CVE-2018-8027
Apache is vulnerable to XXE in XSD validation processor
Critical
CVE-2017-12634
Camel-castor component in Apache Camel is vulnerable to Java object de-serialisation
Critical
CVE-2018-8018
Code execution via deserialization in org.apache.ignite:ignite-core
Critical
CVE-2018-1295
Apache serialization mechanism does not have a list of classes allowed for serialization/deserialization
Medium
CVE-2016-6805
Moderate severity vulnerability that affects org.apache.ignite:ignite-core
High
CVE-2017-7686
Apache Ignite communicates to an external PHP server where sensitive information is sent
Medium
CVE-2018-8032
Moderate severity vulnerability that affects apache axis
Medium
CVE-2014-3596
Improper Validation of Certificates in apache axis
Medium
ghsa-cgpw-2gph-2r9g
Moderate severity vulnerability that affects Microsoft.AspNetCore.All, Microsoft.AspNetCore.App, and Microsoft.AspNetCore.Server.Kestrel.Core
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.