Medium
CVE-2018-11386
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,728
High
CVE-2018-11406
Symfony CSRF Token Fixation
Medium
CVE-2018-16859
Execution of Ansible playbooks on Windows platforms with PowerShell ScriptBlock logging and Module logging enabled can allow for 'become' passwords to appear in EventLogs in plaintext. A local user wi
Medium
CVE-2014-3603
Improper Validation of Certificate with Host Mismatch in Shibboleth Identity Provider and OpenSAML Java
Medium
CVE-2019-11016
Elgg open redirect
Medium
CVE-2019-9644
Improper Neutralization of Input During Web Page Generation in Jupyter Notebook
Critical
CVE-2019-5715
Silverstripe Framework SQLi Vulnerability
Medium
CVE-2014-8114
UberFire Framework Improperly Restricts Paths
Medium
CVE-2012-3544
Apache Tomcat Vulnerable to Denial of Service (DoS) via Improper Handling of chunk extensions
Medium
CVE-2013-4286
Apache Tomcat is vulnerable to HTTP request-smuggling
High
CVE-2017-18366
Subrion CMS vulnerable to CSRF in blog/delete
Medium
CVE-2013-4322
Apache Tomcat Denial of Service vulnerability
Medium
CVE-2013-4590
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
Medium
CVE-2014-0033
Improper Input Validation in Apache Tomcat
Medium
CVE-2013-2067
Improper Authentication in Apache Tomcat
Medium
CVE-2014-0075
Integer Overflow or Wraparound in Apache Tomcat
Medium
CVE-2014-0099
Improper Neutralization of CRLF Sequences in HTTP Headers in Apache Tomcat
Medium
CVE-2014-0119
Missing XML Validation in Apache Tomcat
Medium
CVE-2014-0096
Improper Input Validation in Apache Tomcat
Medium
CVE-2014-0227
Improper Input Validation in Apache Tomcat
High
CVE-2014-0230
Uncontrolled Resource Consumption in Apache Tomcat
Medium
CVE-2014-7810
Improper Access Control in Apache Tomcat
Medium
CVE-2016-0706
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
High
CVE-2016-0714
Improper Access Control in Apache Tomcat
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.