High
CVE-2017-7662
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,074
Reset filters
High
CVE-2017-3162
Improper Input Validation in Apache Hadoop
Medium
CVE-2017-3161
Improper Neutralization of Input During Web Page Generation in Apache Hadoop
Medium
CVE-2016-5001
Exposure of Sensitive Information to an Unauthorized Actor in Apache Hadoop
High
CVE-2017-5637
Uncontrolled Resource Consumption in Apache ZooKeeper
Critical
CVE-2019-5919
Nablarch Incomplete Cryptography
High
CVE-2017-5661
Improper Restriction of XML External Entity Reference in Apache FOP
Medium
CVE-2018-14040
Bootstrap vulnerable to Cross-Site Scripting (XSS)
High
CVE-2011-5034
Apache Geronimo Hash Collisions Cause DoS
Medium
CVE-2017-8032
Cloud Foundry UAA Identity Zone Admin Privilege Escalation
Critical
CVE-2016-6637
Cloud Foundry vulnerable to Cross-Site Request Forgery
High
CVE-2017-4991
Cloud Foundry UAA password reset vulnerability
Medium
CVE-2017-4974
Blind SQL Injection with privileged Cloud Foundry UAA endpoints
Critical
CVE-2017-4992
Cloud Foundry UAA privilege escalation with user invitations
High
CVE-2017-4973
Cloud Foundry UAA Privilege Escalation
High
CVE-2017-4960
Cloud Foundry denial of service vulnerability
High
CVE-2016-3084
Cloud Foundry UAA reset password vulnerable to brute force attack
High
CVE-2015-5349
Apache Directory Studio Command Injection
Medium
CVE-2012-2098
Uncontrolled Resource Consumption in Apache Commons Compress
High
CVE-2018-1256
Issuer validation regression in Spring Cloud SSO Connector
Medium
CVE-2018-1263
spring-integration-zip Arbitrary File Write
High
CVE-2018-1262
UAA privilege escalation across identity zones
Low
CVE-2015-3189
Cloud Foundry Runtime has Weak Password Recovery Mechanism for Forgotten Password
Critical
CVE-2015-5172
Cloud Foundry Runtime has Weak Password Recovery Mechanism for Forgotten Password
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.