Medium
CVE-2018-10936
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 1,601
Reset filters
High
CVE-2017-5617
Server Side Request Forgery in svgSalamander
High
CVE-2017-15288
High severity vulnerability that affects org.scala-lang:scala-compiler
High
CVE-2018-11775
Improper Certificate Validation in Apache activemq-client
Critical
CVE-2017-7658
Jetty vulnerable to authorization bypass due to inconsistent HTTP request handling (HTTP Request Smuggling)
High
CVE-2017-7656
Jetty vulnerable to cache poisoning due to inconsistent HTTP request handling (HTTP Request Smuggling)
Critical
CVE-2016-4800
Jetty contains an alias issue that could allow unauthenticated remote code execution due to specially crafted request
Medium
CVE-2018-12536
Eclipse Jetty Server generates error message containing sensitive information
High
CVE-2017-9735
Jetty vulnerable to exposure of sensitive information due to observable discrepancy
Critical
CVE-2017-7657
Critical severity vulnerability that affects org.eclipse.jetty:jetty-server
Medium
CVE-2018-1196
Moderate severity vulnerability that affects org.springframework.boot:spring-boot
High
CVE-2018-8025
Race condition in org.apache.hbase:hbase-thrift
Medium
CVE-2016-1000345
Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15
High
CVE-2016-7051
jackson-dataformat-xml vulnerable to server side request forgery (SSRF)
Medium
CVE-2015-2918
OrientDB Studio web management interface is vulnerable to clickjacking attacks
Medium
CVE-2015-2913
OrientDB Server Community Edition uses insufficiently random values to generate session IDs
High
CVE-2015-2912
OrientDB-Server vulnerable to Cross-Site Request Forgery
Medium
CVE-2018-10912
Moderate severity vulnerability that affects org.keycloak:keycloak-core
Medium
CVE-2016-8629
Moderate severity vulnerability that affects org.keycloak:keycloak-core
High
CVE-2017-3163
Improper Limitation of a Pathname ('Path Traversal') in org.apache.solr:solr-core
High
CVE-2018-1272
Possible privilege escalation in org.springframework:spring-core
Medium
CVE-2018-1271
Path Traversal in org.springframework:spring-core
Critical
CVE-2017-12629
Remote code execution occurs in Apache Solr
Medium
CVE-2018-8010
There is a XML external entity expansion (XXE) vulnerability in Apache Solr config files
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.