High
CVE-2018-12545
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,601
Reset filters
High
CVE-2015-1772
Improper Authentication in org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service
High
CVE-2016-3083
org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service vulnerable to Improper Certificate Validation
High
CVE-2017-3164
Server-Side Request Forgery (SSRF) in org.apache.solr:solr-core
Critical
CVE-2019-0192
Critical severity vulnerability that affects org.apache.solr:solr-core
Medium
CVE-2019-3778
spring-security-oauth and spring-security-oauth2 Open Redirect vulnerability
Critical
CVE-2019-0187
Unauthenticated Remote Code Execution in Apache JMeter
Medium
CVE-2018-11798
Apache Thrift Node.js static web server sandbox escape
Critical
CVE-2018-14721
Server-Side Request Forgery (SSRF) in jackson-databind
Medium
CVE-2017-15713
Moderate severity vulnerability that affects org.apache.hadoop:hadoop-main
Critical
CVE-2018-1000836
XML External Entity (XXE) vulnerability in bw-calendar-engine
Critical
CVE-2018-1000823
exist-db:exist-core XML External Entity (XXE) vulnerability
High
CVE-2018-19907
OS Command Injection in craftercms:crafter-studio
High
CVE-2018-11777
Improper Authentication in hive:hive-exec
Low
CVE-2018-1284
Exposure of Sensitive Information to an Unauthorized Actor in Apache hive
Low
CVE-2018-1315
Incorrect Permission Assignment for Critical Resource in Apache hive
High
CVE-2018-17187
Improper Certificate Validation in proton-j
High
CVE-2015-2080
Jetty vulnerable to exposure of sensitive information to unauthenticated remote users
Medium
CVE-2017-7678
Moderate severity vulnerability that affects org.apache.spark:spark-core_2.10 and org.apache.spark:spark-core_2.11
Critical
CVE-2018-18830
Unrestricted Upload of File with Dangerous Type in mingsoft:ms-mcms
High
CVE-2018-15758
Authorization bypass in org.springframework.security.oauth:spring-security-oauth2
Medium
CVE-2018-12537
Moderate severity vulnerability that affects io.vertx:vertx-core
Medium
CVE-2017-2670
Moderate severity vulnerability that affects io.undertow:undertow-core
Critical
CVE-2018-1000644
Eclipse RDF4j vulnerable to XML External Entity
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.