Medium
CVE-2018-1000109
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filters
Medium
CVE-2018-1000110
Incorrect Authorization in Jenkins Git Plugin
Medium
CVE-2018-1000057
Jenkins Credentials Binding Plugin has Insufficiently Protected Credentials
Medium
CVE-2017-9797
Apache Geode vulnerable to Exposure of Sensitive Information
High
CVE-2017-9790
Use after free in Apache Mesos
Medium
CVE-2017-8039
Insecure Default Initialization of Resource in Pivotal Spring Web Flow
High
CVE-2017-7684
Apache OpenMeetings vulnerable to Uncontrolled Resource Consumption
Medium
CVE-2017-7685
Apache OpenMeetings responds to insecure HTTP methods
High
CVE-2017-7688
Apache OpenMeetings updates user password in insecure manner
High
CVE-2017-7687
Denial of service in Apache Mesos
High
CVE-2017-7680
Apache OpenMeetings allows flash content to be loaded from untrusted domains
High
CVE-2017-7682
Apache OpenMeetings vulnerable to parameter manipulation attacks
Critical
CVE-2017-7673
Apache OpenMeetings has Inadequate Encryption Strength
High
CVE-2017-7561
Inconsistent Interpretation of HTTP Requests in Red Hat JBoss EAP
High
CVE-2017-5664
Improper Handling of Exceptional Conditions in Apache Tomcat
Critical
CVE-2017-5651
Expected Behavior Violation in Apache Tomcat
High
CVE-2017-5650
Improper Resource Shutdown or Release in Apache Tomcat
High
CVE-2017-5635
Improper Authentication In Apache NiFi
Medium
CVE-2017-4971
Insecure Default Initialization of Resource in Pivotal Spring Web Flow
Low
CVE-2017-3589
Exposure of Sensitive Information to an Unauthorized Actor in Oracle MySQL Connectors Java
Medium
CVE-2017-3586
Exposure of Sensitive Information to an Unauthorized Actor in Oracle MySQL Connectors Java
High
CVE-2017-3523
Improper Access Control in MySQL Connectors Java
High
CVE-2017-13763
ONOS vulnerable to denial of service due to unrestricted NettyMessagingManager payload
Low
CVE-2017-12973
Nimbus JOSE+JWT vulnerable to padding oracle attack
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.