Medium
CVE-2019-8331
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,072
Reset filters
High
CVE-2018-1296
Exposure of Sensitive Information to an Unauthorized Actor in Hadoop
Medium
CVE-2018-20242
Cross-site Scripting in jspwiki-war
Low
CVE-2019-3774
Low severity vulnerability that affects org.springframework.batch:spring-batch-core
Critical
CVE-2019-3773
Vulnerability that affects org.springframework.ws:spring-ws and org.springframework.ws:spring-xml
Low
CVE-2019-3772
Improper Restriction of XML External Entity Reference in org.springframework.integration:spring-integration-ws and org.springframework.integration:spring-integration-xml
Medium
CVE-2018-20677
bootstrap Cross-site Scripting vulnerability
Medium
CVE-2018-20676
XSS vulnerability that affects bootstrap
Medium
CVE-2016-10735
Bootstrap Cross-site Scripting vulnerability
High
CVE-2018-1320
Improper Input Validation in Apache Thrift
Medium
CVE-2018-11798
Apache Thrift Node.js static web server sandbox escape
High
CVE-2018-11787
Improper Authentication in Apache Karaf
Critical
CVE-2018-11788
XML External Entity Reference in Apache Karaf
Medium
CVE-2016-8750
Moderate severity vulnerability that affects org.apache.karaf:apache-karaf
Critical
CVE-2018-20433
XML External Entity Reference in mchange:c3p0
Critical
CVE-2018-14719
Arbitrary Code Execution in jackson-databind
Critical
CVE-2018-14720
XML External Entity Reference (XXE) in jackson-databind
Critical
CVE-2018-14721
Server-Side Request Forgery (SSRF) in jackson-databind
Critical
CVE-2018-19362
com.fasterxml.jackson.core:jackson-databind vulnerable to Deserialization of Untrusted Data
Critical
CVE-2018-19361
Deserialization of Untrusted Data in jackson-databind
Critical
CVE-2018-19360
Deserialization of Untrusted Data in jackson-databind due to polymorphic deserialization
Critical
CVE-2018-14718
Arbitrary Code Execution in jackson-databind
Medium
CVE-2018-18893
Jinjava calls getClass
Medium
CVE-2018-20594
Moderate severity vulnerability that affects org.hswebframework.web:hsweb-commons
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.