Medium
CVE-2017-2613
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 547
Reset filters
High
CVE-2019-1003009
Jenkins Active Directory Plugin Improper certificate validation with StartTLS
Medium
CVE-2019-1003012
Cross-Site Request Forgery in Jenkins Blue Ocean Plugin
High
CVE-2018-13864
Play Framework's Assets controller vulnerable to directory traversal
High
CVE-2019-10277
Jenkins StarTeam Plugin stores credentials in plain text
Critical
Exploited in attacks
CVE-2013-2251
Code injection in Apache Struts
Medium
CVE-2016-10027
Smack allows the bypass of TLS protections
Medium
CVE-2018-14040
Bootstrap vulnerable to Cross-Site Scripting (XSS)
Medium
CVE-2018-1263
spring-integration-zip Arbitrary File Write
High
CVE-2018-1999001
Improper Input Validation in Jenkins
Medium
CVE-2022-24823
Local Information Disclosure Vulnerability in io.netty:netty-codec-http
Medium
CVE-2009-0783
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
High
CVE-2002-0493
Apache Tomcat may be started without proper security settings
Critical
CVE-2022-1245
Keycloak vulnerable to privilege escalation on Token Exchange feature
Critical
CVE-2022-26612
Path traversal in Hadoop
Critical
Exploited in attacks
CVE-2022-22965
Remote Code Execution in Spring Framework
Medium
CVE-2021-22114
Path Traversal in Spring-integration-zip
Medium
CVE-2022-25196
Open redirect vulnerability in Jenkins GitLab Authentication Plugin
Critical
CVE-2020-9480
In Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configured to require authentication (spark.authenticate) via a shared secret. When enabled, however, a specially-craft
Critical
CVE-2020-17523
Authentication bypass in Apache Shiro
High
CVE-2022-21724
pgjdbc Does Not Check Class Instantiation when providing Plugin Classes
Medium
CVE-2022-24198
Out-of-bounds Read in iText
High
CVE-2021-43859
Denial of Service by injecting highly recursive collections or maps in XStream
High
CVE-2021-41766
Insecure Java Deserialization in Apache Karaf
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.