Medium
CVE-2005-2090
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,602
Reset filters
High
CVE-2002-1394
Apache Tomcat Source Code Disclosure
Medium
CVE-2002-1148
Apache Tomcat Source Code Disclosure
Medium
CVE-2002-0935
Apache Tomcat DoS Via Requests Including Null Characters
Medium
CVE-2004-2650
Apache James Denial of Service
Medium
CVE-2004-2381
Jetty HTTP Server Denial of Service vulnerability
Medium
CVE-2022-24898
Arbitrary file access through XML parsing in org.xwiki.commons:xwiki-commons-xml
High
CVE-2012-1094
JBoss AS may expose root content if excluded-contexts list is mismatched
High
CVE-2022-24847
Improper Input Validation in GeoServer
High
CVE-2022-28108
Selenium Server (Grid) CSRF
Medium
CVE-2022-29051
Missing permission checks in Jenkins Publish Over FTP Plugin
High
CVE-2022-29050
CSRF vulnerability in Jenkins Publish Over FTP Plugin
High
CVE-2022-24827
SQL Injection in elide-datastore-aggregation
Medium
CVE-2022-28133
Stored XSS vulnerability in Jenkins Bitbucket Server Integration Plugin
High
CVE-2022-28155
XML External Entity Reference vulnerability in Jenkins Pipeline: Phoenix AutoTest Plugin
Medium
CVE-2022-28134
Missing permission checks in Jekins Bitbucket Server Integration Plugin
High
CVE-2022-28145
Cross-site Scripting (XSS) vulnerability in Jenkins Continuous Integration with Toad Edge Plugin
High
CVE-2022-28154
enkins Coverage/Complexity Scatter Plot Plugin XML External Entity Reference vulnerability
Medium
CVE-2022-28157
Path traversal in Jenkins Pipeline Phoenix AutoTest Plugin
Medium
CVE-2022-27820
Improper Certificate Validation in OWASP ZAP
High
CVE-2020-35510
Uncontrolled Resource Consumption in jboss-remoting
Critical
CVE-2021-30180
Code injection in Apache Dubbo
Critical
CVE-2021-30181
Code injection in Apache Dubbo
Medium
CVE-2021-25640
Server-Side Request Forgery in Apache Dubbo
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.