High
CVE-2018-1999025
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filters
Medium
CVE-2018-1999026
Jenkins TraceTronic ECU-TEST Plugin server-side request forgery vulnerability
High
CVE-2018-1999035
Jenkins Inedo BuildMaster Plugin globally and unconditionally disabled SSL/TLS certificate validation
High
CVE-2018-1999034
Jenkins Inedo ProGet Plugin globally and unconditionally disabled SSL/TLS certificate validation
Medium
CVE-2018-1000605
Jenkins CollabNet Plugin man in the middle vulnerability
Medium
CVE-2011-0533
Apache Continuum and Archiva vulnerable to Cross-site Scripting
High
CVE-2011-0534
Apache Tomcat does not enforce the maxHttpHeaderSize limit
Medium
CVE-2011-1088
Apache Tomcat allows remote attackers to bypass intended access restrictions
Medium
CVE-2011-1183
Access controll bypass in Apache Tomcat
Medium
CVE-2011-1582
Access restriction bypass in Apache Tomcat
Medium
CVE-2011-2088
XWork in Apache Struts Reveals Sensitive Information
Medium
CVE-2011-2894
Spring Framework and Spring Security vulnerable to Deserialization of Untrusted Data
Medium
CVE-2013-5855
Improper Neutralization of Input During Web Page Generation in Mojarra
Medium
CVE-2013-6235
Improper Neutralization of Input During Web Page Generation in JAMon
Medium
CVE-2014-3503
Apache Syncope uses a weak PNRG
Medium
CVE-2014-6439
Cross-site scripting in Elasticsearch
Medium
CVE-2014-7809
Cross-Site Request Forgery in Apache Struts
High
CVE-2015-0225
Improper Neutralization of Special Elements used in a Command in Apache Cassandra
High
Exploited in attacks
CVE-2015-1427
Improper Access Control in Elasticsearch
Medium
CVE-2015-1833
Improper Input Validation in Apache Jackrabbit
Low
CVE-2015-2351
Alkacon OpenCMS XSS via homelink, workplaceresource, mode and query parameters
Critical
CVE-2015-3188
Apache Storm remote code execution vulnerability
High
CVE-2015-4165
Improper Access Control in Elasticsearch
Medium
CVE-2015-5531
Improper Limitation of a Pathname to a Restricted Directory in Elasticsearch
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.