Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 7.071
Filter zurücksetzenWhen running Apache Tomcat on Windows with HTTP PUTs enabled it was possible to upload a JSP file to the server
Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15
In Bouncy Castle JCE Provider the ECIES implementation allowed the use of ECB mode
In Bouncy Castle JCE Provider the other party DH public key is not fully validated
In Bouncy Castle JCE Provider the DSA key pair generator generates a weak private key if used with default values
In Bouncy Castle JCE Provider ECDSA does not fully validate ASN.1 encoding of signature on verification
Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15
The Bouncy Castle JCE Provider carry a propagation bug
Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15
In Bouncy Castle JCE Provider it is possible to inject extra elements in the sequence making up the signature and still have it validate
Deserialization of Untrusted Data in Bouncy castle
Eclipse Vert.x does not properly neutralize '' (forward slashes) sequences that can resolve to an external location
Moderate severity vulnerability that affects io.vertx:vertx-core
Excessive memory allocation
High severity vulnerability that affects io.vertx:vertx-web
Moderate severity vulnerability that affects org.apache.tika:tika-core
Comparison errorr in org.apache.tika:tika-core
Moderate severity vulnerability that affects org.apache.tika:tika-core
High severity vulnerability that affects org.apache.tika:tika-core
Apache Tika allows Java code execution for serialized objects embedded in MATLAB files
Apache Tika does not properly initialize the XML parser or choose handlers
Apache Tika Server exposes sensitive information
org.apache.tika:tika-parsers has an Infinite Loop vulnerability
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.