High
CVE-2020-7226
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,072
Reset filters
Critical
CVE-2019-17570
Insecure Deserialization in Apache XML-RPC
Medium
CVE-2019-17573
Reflected Cross-Site Scripting in Apache CXF
Critical
CVE-2020-10683
dom4j allows External Entities by default which might enable XXE attacks
High
CVE-2020-5407
Signature wrapping vulnerability in Spring Security
High
Exploited in attacks
CVE-2020-5410
Directory traversal attack in Spring Cloud Config
Medium
CVE-2020-5405
Directory traversal attack in Spring Cloud Config
Critical
CVE-2020-1963
File system access via H2 in Apache Ignite
Low
CVE-2020-9488
Improper validation of certificate with host mismatch in Apache Log4j SMTP appender
High
CVE-2019-12423
Private key leak in Apache CXF
Critical
CVE-2020-11973
Apache Camel Netty enables Java deserialization by default
Medium
CVE-2020-1941
Apache ActiveMQ webconsole admin GUI is open to XSS
High
CVE-2020-5529
Code execution vulnerability in HtmlUnit
Critical
CVE-2020-1953
Remote code execution in Apache Commons Configuration
High
CVE-2020-9484
Potential remote code execution in Apache Tomcat
Medium
CVE-2020-7656
Cross-Site Scripting in jquery
Critical
CVE-2020-9547
jackson-databind mishandles the interaction between serialization gadgets and typing
High
CVE-2019-14893
Polymorphic deserialization of malicious object in jackson-databind
High
CVE-2020-10673
jackson-databind mishandles the interaction between serialization gadgets and typing
Critical
CVE-2020-9548
jackson-databind mishandles the interaction between serialization gadgets and typing
High
CVE-2019-14892
Polymorphic deserialization of malicious object in jackson-databind
High
CVE-2020-10968
jackson-databind mishandles the interaction between serialization gadgets and typing
High
CVE-2020-11111
jackson-databind mishandles the interaction between serialization gadgets and typing
High
CVE-2020-11113
jackson-databind mishandles the interaction between serialization gadgets and typing
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.