Schwachstellen verstehen. Anwendungen schützen.
Erfahren Sie, welche Schwachstellen Ihre Technologien betreffen und wie Sie diese beheben. Hier finden Sie verständliche Erklärungen, betroffene Versionen und konkrete Empfehlungen - von CMS und Plugins bis zu Anwendungsbibliotheken.
Schwachstellenarchiv 71.587
Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15
The Bouncy Castle JCE Provider carry a propagation bug
Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15
In Bouncy Castle JCE Provider it is possible to inject extra elements in the sequence making up the signature and still have it validate
Deserialization of Untrusted Data in Bouncy castle
Eclipse Vert.x does not properly neutralize '' (forward slashes) sequences that can resolve to an external location
Moderate severity vulnerability that affects io.vertx:vertx-core
Excessive memory allocation
High severity vulnerability that affects io.vertx:vertx-web
Moderate severity vulnerability that affects org.apache.tika:tika-core
Comparison errorr in org.apache.tika:tika-core
Moderate severity vulnerability that affects org.apache.tika:tika-core
High severity vulnerability that affects org.apache.tika:tika-core
Apache Tika allows Java code execution for serialized objects embedded in MATLAB files
Apache Tika does not properly initialize the XML parser or choose handlers
Apache Tika Server exposes sensitive information
org.apache.tika:tika-parsers has an Infinite Loop vulnerability
Command injection in org.apache.tika:tika-core
Apache Tika is vulnerable to entity expansions which can lead to a denial of service attack
Denial of service vulnerability in org.apache.httpcomponents:httpclient
Improper certificate validation in org.apache.httpcomponents:httpclient
Improper Verification of Cryptographic Signature in org.apache.httpcomponents:httpclient
Moderate severity vulnerability that affects org.restlet.jse:org.restlet
Erkennen Sie Schwachstellen in Ihrer Anwendung
Mit der DockRay-Integration und aktivierter Softwareinventarisierung prüft DockRay gemeldete Komponentenversionen auf bekannte Schwachstellen und benachrichtigt Sie über bestätigte Treffer. Die Abdeckung hängt von der unterstützten Technologie und den verfügbaren Meldungen ab.