Medium
CVE-2019-16148
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,072
Reset filters
High
CVE-2019-10199
Improper Input Validation and Cross-Site Request Forgery in Keycloak
Medium
CVE-2019-10201
Improper Verification of Cryptographic Signature in keycloak
Medium
CVE-2019-11777
Improper Handling of Exceptional Conditions and Origin Validation Error in Eclipse Paho Java client library
Medium
CVE-2019-10753
Incorrect Resource Transfer Between Spheres in eclipse-wtp
High
CVE-2019-5475
OS Command Injection in Nexus Yum Repository Plugin
Medium
CVE-2019-12400
Improper input validation in Apache Santuario XML Security for Java
Medium
CVE-2019-15477
Cross-site Scripting in Jooby
Medium
CVE-2019-15488
Cross-site Scripting in Ignite Realtime Openfire
Medium
CVE-2019-12397
Cross-site scripting in Apache Ranger
High
CVE-2019-10099
Prior to Spark 2.3.3, in certain situations Spark would write user data to local disk unencrypted, even if spark.io.encryption.enabled=true. This includes cached blocks that are fetched to disk (contr
High
CVE-2019-10088
Allocation of Resources Without Limits or Throttling in Apache Tika
Medium
CVE-2019-10093
Allocation of Resources Without Limits or Throttling in Apache Tika
High
CVE-2019-10094
Allocation of Resources Without Limits or Throttling in Apache Tika
High
CVE-2019-10184
Undertow Missing Authorization when requesting a protected directory without trailing slash
High
CVE-2019-14439
Deserialization of untrusted data in FasterXML jackson-databind
Critical
CVE-2019-14379
Deserialization of untrusted data in FasterXML jackson-databind
Critical
CVE-2018-11779
Deserialization of Untrusted Data in Apache Storm
Medium
CVE-2015-7559
Improper Input Validation and Missing Authentication for Critical Function in Apache ActiveMQ
High
Exploited in attacks
CVE-2019-0193
XML External Entity (XXE) Injection in Apache Solr
Critical
CVE-2018-15890
Deserialization of Untrusted Data in EthereumJ
Critical
CVE-2019-10173
Deserialization of Untrusted Data and Code Injection in xstream
Medium
CVE-2019-12814
Deserialization of untrusted data in FasterXML jackson-databind
Critical
CVE-2018-11307
Deserialization of Untrusted Data in jackson-databind
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.