High
CVE-2018-1262
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,602
Reset filters
Low
CVE-2015-3189
Cloud Foundry Runtime has Weak Password Recovery Mechanism for Forgotten Password
Critical
CVE-2015-5172
Cloud Foundry Runtime has Weak Password Recovery Mechanism for Forgotten Password
Critical
CVE-2015-5171
Cloud Foundry Runtime Insufficient Session Expiration vulnerability
High
CVE-2015-5170
Cloud Foundry Runtime Cross-Site Request Forgery vulnerability
High
CVE-2018-8012
Missing Authorization in Apache ZooKeeper
Critical
CVE-2017-8046
Remote code execution in PATCH requests in Spring Data REST
Medium
CVE-2018-1313
Improper Access Control in Apache Derby
Medium
CVE-2018-1288
Improper Control of Generation of Code in Apache Kafka
Medium
CVE-2018-1000067
Server-Side Request Forgery in Jenkins
Medium
CVE-2018-1000195
Cross-Site Request Forgery in Jenkins
Critical
CVE-2022-25767
Deserialization of Untrusted Data in com.bstek.ureport:ureport2-console
High
CVE-2021-40822
GeoServer allows SSRF via the option for setting a proxy host
Medium
CVE-2010-1157
Exposure of Sensitive Information to an Unauthorized Actor in Apache Tomcat
Critical
CVE-2009-3555
Apache Tomcat affected by vulnerability in TLS and SSL protocol
Medium
CVE-2009-1523
Directory traversal in Mort Bay Jetty
Medium
CVE-2009-1190
Spring Framework Inefficient Regular Expression Complexity
Medium
CVE-2009-0217
Apache XML Security For Java vulnerable to authentication bypass by HMAC truncation
Medium
CVE-2009-0039
Apache Geronimo Application Server CSRF vulnerabilities
Medium
CVE-2009-0038
Apache Geronimo Application Server multiple cross-site scripting (XSS) vulnerabilities
Medium
CVE-2008-1285
Cross-site scripting (XSS) vulnerability in Sun Java Server Faces (JSF)
Medium
CVE-2007-6726
Apache Struts Dojo Plugin XSS Vulnerability
Medium
CVE-2006-6969
Jetty Uses Predictable Session Identifiers
Low
CVE-2005-3164
Apache Tomcat AJP Connector Information Leak
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.