High
CVE-2017-9803
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filters
Medium
CVE-2014-3558
Improper Authentication in Hibernate Validator
High
CVE-2014-3490
Incorrect Privilege Assignment in RESTEasy
Medium
CVE-2014-0111
Apache Syncope JEXL Code Injection
Medium
CVE-2016-0763
Improper Verification of Source of a Communication Channel in Apache Tomcat
Medium
CVE-2008-5515
Directory Traversal in Apache Tomcat
Medium
CVE-2010-2227
Apache Tomcat does not properly handle an invalid Transfer-Encoding header
Medium
CVE-2011-5063
Improper Authentication in Apache Tomcat
Medium
CVE-2011-5062
Improper Authentication in Apache Tomcat
Medium
CVE-2011-2526
Improper Input Validation in Apache Tomcat
Medium
CVE-2011-2204
Insertion of Sensitive Information into Log File in Apache Tomcat
Medium
CVE-2011-5064
Use of Hard-coded Cryptographic Key in Apache Tomcat
High
CVE-2011-3190
Apache Tomcat Allows Remote Attackers to Spoof AJP Requests
Medium
CVE-2011-1184
Authentication Bypass in Apache Tomcat
Low
CVE-2010-3718
Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat
Medium
CVE-2014-1904
Improper Neutralization of Input During Web Page Generation in Spring Framework
High
CVE-2014-3612
Improper Authentication in Apache WSS4J
Medium
CVE-2014-8110
Improper Neutralization of Input During Web Page Generation in Apache ActiveMQ
Critical
CVE-2014-3579
Apache ActiveMQ Apollo XXE Vulnerability
Critical
CVE-2014-3600
Improper Restriction of XML External Entity Reference in Apache ActiveMQ
High
CVE-2014-3576
Improper Neutralization of Special Elements used in an OS Command in Apache ActiveMQ
Critical
Exploited in attacks
CVE-2016-3088
Improper Input Validation in Apache ActiveMQ
Medium
CVE-2015-1830
Improper Limitation of a Pathname to a Restricted Directory in Apache ActiveMQ
Medium
CVE-2016-0734
Improper Neutralization of Input During Web Page Generation in Apache ActiveMQ
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.