Critical
CVE-2016-3087
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,690
High
Exploited in attacks
CVE-2016-3081
Apache Struts RCE Vulnerability
Critical
CVE-2016-6795
Path Traversal in Apache Struts
Critical
CVE-2016-4438
Arbitrary code execution in Apache Struts 2
Medium
CVE-2018-1000416
Jenkins Job Config History Plugin reflected XSS vulnerability
High
CVE-2016-0785
Apache Struts RCE Vulnerability
Medium
CVE-2019-9648
CoreFTP Directory Traversal
Medium
CVE-2013-5823
Apache XML Security For Java vulnerable to Infinite Loop
High
CVE-2022-25762
Improper socket reuse in Apache Tomcat
Critical
CVE-2022-21190
Prototype Pollution in convict
Critical
CVE-2022-25865
Command injection in workspace-tools
High
CVE-2022-25862
Prototype Pollution in sds
Critical
CVE-2022-1715
Account takeover in facturascripts
Medium
CVE-2022-29433
Donations <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
Critical
CVE-2018-10931
Cobbler has Exposed Dangerous Method or Function
High
CVE-2015-6240
The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users to escape a restricted environment via a symlink attack.
High
CVE-2015-7529
sosreport in SoS 3.x allows local users to obtain sensitive information from sosreport files or gain privileges via a symlink attack on an archive file in a temporary directory, as demonstrated by sos
Medium
CVE-2014-0193
Netty denial of service vulnerability
Critical
CVE-2018-9160
SickRage before v2018.03.09-1 includes cleartext credentials in HTTP responses.
High
CVE-2018-8947
Plaintext Storage of Sensitive Information in Laravel Log Viewer before v0.13.0
Medium
CVE-2018-8452
ChakraCore information disclosure vulnerability
Medium
CVE-2018-8276
ChakraCore Security Bypass
High
CVE-2018-8145
ChakraCore information disclosure vulnerability
Medium
CVE-2018-8036
Loop with Unreachable Exit Condition in Apache PDFBox
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.