Medium
CVE-2010-1870
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,602
Reset filters
High
CVE-2017-5662
Improper Restriction of XML External Entity Reference in Apache Batik
Medium
CVE-2013-7398
Insufficient Verification of Data Authenticity in Async Http Client
Medium
CVE-2013-7397
Insufficient Verification of Data Authenticity in Async Http Client
High
CVE-2017-8028
Improper Authentication in Pivotal Spring-LDAP
High
CVE-2017-12174
Uncontrolled Resource Consumption in Artemis and HornetQ
Medium
CVE-2016-10027
Smack allows the bypass of TLS protections
Medium
CVE-2012-5783
Improper Certificate Validation in Apache Commons HttpClient
Medium
CVE-2018-1190
Pivotal Cloud Foundry UAA XSS on UAA OpenID Connect check session iframe endpoint
Medium
CVE-2017-8031
Cloud Foundry UAA Denial of Service through client token revocation endpoint
Medium
CVE-2016-5725
Improper Limitation of a Pathname to a Restricted Directory in JCraft JSch
High
CVE-2010-2076
Improper Input Validation in Apache CXF
Medium
CVE-2017-5653
Improper Certificate Validation in Apache CXF
High
CVE-2017-5637
Uncontrolled Resource Consumption in Apache ZooKeeper
High
CVE-2017-5661
Improper Restriction of XML External Entity Reference in Apache FOP
Medium
CVE-2017-8032
Cloud Foundry UAA Identity Zone Admin Privilege Escalation
Critical
CVE-2016-6637
Cloud Foundry vulnerable to Cross-Site Request Forgery
High
CVE-2017-4991
Cloud Foundry UAA password reset vulnerability
Medium
CVE-2017-4974
Blind SQL Injection with privileged Cloud Foundry UAA endpoints
Critical
CVE-2017-4992
Cloud Foundry UAA privilege escalation with user invitations
High
CVE-2017-4973
Cloud Foundry UAA Privilege Escalation
High
CVE-2017-4960
Cloud Foundry denial of service vulnerability
High
CVE-2016-3084
Cloud Foundry UAA reset password vulnerable to brute force attack
High
CVE-2018-1256
Issuer validation regression in Spring Cloud SSO Connector
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.