Critical
CVE-2019-17495
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,602
Reset filters
Medium
CVE-2019-11777
Improper Handling of Exceptional Conditions and Origin Validation Error in Eclipse Paho Java client library
Medium
CVE-2019-15488
Cross-site Scripting in Ignite Realtime Openfire
Critical
CVE-2018-15890
Deserialization of Untrusted Data in EthereumJ
Medium
CVE-2019-12814
Deserialization of untrusted data in FasterXML jackson-databind
Critical
CVE-2019-9827
Server-Side Request Forgery in Hawt Hawtio
High
CVE-2019-10072
Improper Locking in Apache Tomcat
Medium
CVE-2017-15694
Argument Injection in Apache Geode server
Medium
CVE-2019-11269
Open Redirect in Spring Security OAuth
Critical
CVE-2019-3888
Credential exposure through log files in Undertow
High
CVE-2019-12086
Information exposure in FasterXML jackson-databind
Medium
CVE-2019-3799
Path Traversal in Spring Cloud Config
Medium
CVE-2019-3797
Exposure of Sensitive Information to an Unauthorized Actor and SQL Injection in Spring Data JPA
High
CVE-2019-0227
Server Side Request Forgery in Apache Axis
Low
CVE-2019-11808
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Ratpack
Medium
CVE-2019-0213
Cross-site scripting in Apache Archiva
Medium
CVE-2019-0214
Improper Input Validation in Apache Archiva
Medium
CVE-2019-10246
Information Exposure vulnerability in Eclipse Jetty
Medium
CVE-2019-10247
Installation information leak in Eclipse Jetty
Medium
CVE-2019-10241
Cross-site Scripting in Eclipse Jetty
Critical
CVE-2019-10686
Server-Side Request Forgery (SSRF) in com.ctrip.framework.apollo:apollo
High
CVE-2019-10240
Cleartext Transmission of Sensitive Information, Inclusion of Functionality from Untrusted Control Sphere , and Download of Code Without Integrity Check in Eclipse hawkBit
High
CVE-2019-1010260
High severity vulnerability that affects com.github.shyiko.ktlint:ktlint-core
High
CVE-2019-0212
Improper Authorization in org.apache.hbase:hbase
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.