Media
CVE-2015-3192
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 71.587
Media
CVE-2015-0201
Moderate severity vulnerability that affects org.springframework:spring-core
Crítica
CVE-2018-1275
Spring Framework has Improperly Implemented Security Check for Standard
Alta
CVE-2018-1272
Possible privilege escalation in org.springframework:spring-core
Media
CVE-2018-1271
Path Traversal in org.springframework:spring-core
Crítica
CVE-2018-1270
Spring Framework allows applications to expose STOMP over WebSocket endpoints
Alta
CVE-2018-1258
Spring Framework when used in combination with any versions of Spring Security contains an authorization bypass
Media
CVE-2018-1257
Denial of Service in org.springframework:spring-core
Media
CVE-2018-1199
Improper Input Validation in org.springframework.security:spring-security-core, org.springframework.security:spring-security-core , and org.springframework:spring-core
Crítica
CVE-2017-12629
Remote code execution occurs in Apache Solr
Media
CVE-2018-8010
There is a XML external entity expansion (XXE) vulnerability in Apache Solr config files
Alta
CVE-2018-1308
There is a XML external entity expansion (XXE) vulnerability in Apache Solr
Media
CVE-2018-8026
XML external entity expansion in org.apache.solr:solr-core
Alta
CVE-2018-17297
Unzip function in ZipUtil.java in Hutool allows remote attackers to overwrite arbitrary files via directory traversal
Media
CVE-2018-8023
Moderate severity vulnerability that affects org.apache.mesos:mesos
Alta
CVE-2018-17785
In blynk-server a Directory Traversal exists
Media
CVE-2018-1332
Moderate severity vulnerability that affects org.apache.storm:storm-core
Alta
CVE-2018-1331
Code execution in org.apache.storm:storm-core
Alta
CVE-2017-9799
Apache Storm it is possible for the owner of a topology to trick the supervisor to launch a worker as a different, non-root, user
Crítica
CVE-2018-15531
JavaMelody has XXE via parseSoapMethodName in bull/javamelody/PayloadNameRequestWrapper.java.
Media
CVE-2018-11797
In Apache PDFBox a carefully crafted PDF file can trigger an extremely long running computation
Alta
CVE-2016-2175
High severity vulnerability that affects org.apache.pdfbox:pdfbox
Crítica
CVE-2018-18389
Incorrect access control in Neo4j Enterprise Database Server via LDAP authentication
Alta
CVE-2018-1274
Spring Data Commons contain a property path parser vulnerability caused by unlimited resource allocation
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.