Critical
CVE-2015-5171
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filters
High
CVE-2015-5170
Cloud Foundry Runtime Cross-Site Request Forgery vulnerability
Medium
CVE-2019-6804
Rundeck Community Edition vulnerable to Cross-site Scripting
High
CVE-2015-5237
protobuf allows remote authenticated attackers to cause a heap-based buffer overflow.
Medium
CVE-2016-0767
PostgreSQL PL/Java Improper Privilege Management
High
CVE-2018-8012
Missing Authorization in Apache ZooKeeper
Medium
CVE-2013-2172
Inefficient Algorithmic Complexity in Apache Santuario XML Security
Medium
CVE-2013-4517
Improper Input Validation in Apache Santuario XML Security
Medium
CVE-2014-8152
Improper Input Validation in Apache Santuario XML Security
Medium
CVE-2015-0886
Integer Overflow or Wraparound in JBCrypt
High
CVE-2014-0107
Improper Authorization in Apache Xalan-Java
Medium
CVE-2014-3004
Improper Restriction of XML External Entity Reference in Castor
High
CVE-2019-1003003
Improper Authorization in Jenkins Core
High
CVE-2019-1003004
Improper Authorization in Jenkins Core
High
CVE-2019-0204
Docker image code execution with Apache Mesos
Critical
CVE-2018-8088
Improper Access Control in SLF4J
Medium
CVE-2013-6440
Exposure of Sensitive Information to an Unauthorized Actor in OpenSAML
Critical
CVE-2016-2141
Improper Input Validation in JGroups
Critical
CVE-2017-8046
Remote code execution in PATCH requests in Spring Data REST
Medium
CVE-2013-6429
Cross-Site Request Forgery in Spring Framework
Medium
CVE-2014-3625
Improper Limitation of a Pathname to a Restricted Directory in Spring Framework
High
CVE-2014-0225
Improper Restriction of XML External Entity Reference in Spring Framework
Medium
CVE-2014-0054
Cross-Site Request Forgery in Spring Framework
Medium
CVE-2013-4152
Cross-Site Request Forgery in Spring Framework
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.