High
CVE-2018-15801
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,072
Reset filters
Medium
CVE-2018-11799
Moderate severity vulnerability that affects org.apache.oozie:oozie-core
High
CVE-2018-20094
XXL-CONF Path Traversal vulnerability
High
CVE-2018-20000
Improper Restriction of XML External Entity Reference in bedework:bw-webdav
Critical
CVE-2018-20059
Improper Restriction of XML External Entity Reference in pippo-core
High
CVE-2018-19907
OS Command Injection in craftercms:crafter-studio
High
CVE-2018-15795
Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) in Pivotal CredHub Service Broker
High
CVE-2018-11777
Improper Authentication in hive:hive-exec
Medium
CVE-2018-1314
Moderate severity vulnerability that affects org.apache.hive:hive-jdbc
Critical
CVE-2018-1282
SQL Injection in hive-jdbc
Low
CVE-2018-1284
Exposure of Sensitive Information to an Unauthorized Actor in Apache hive
Low
CVE-2018-1315
Incorrect Permission Assignment for Critical Resource in Apache hive
High
CVE-2015-7521
High severity vulnerability that affects org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service
Low
CVE-2014-0228
Low severity vulnerability that affects org.apache.hive:hive-exec, org.apache.hive:hive, and org.apache.hive:hive-service
High
CVE-2018-17187
Improper Certificate Validation in proton-j
Critical
CVE-2018-17190
Remote Code Execution in spark-core
Critical
CVE-2017-18239
Exposure of Sensitive information in authentikat-jwt
High
CVE-2015-2080
Jetty vulnerable to exposure of sensitive information to unauthenticated remote users
Critical
CVE-2018-1337
Credential leak in org.apache.directory.api:apache-ldap-api
Medium
CVE-2017-7678
Moderate severity vulnerability that affects org.apache.spark:spark-core_2.10 and org.apache.spark:spark-core_2.11
High
CVE-2018-18853
Uncontrolled Resource Consumption in spray-json when parsing decimal digit fields
Medium
CVE-2018-11770
org.apache.spark:spark-core_2.10 and org.apache.spark:spark-core_2.11 Improper Authentication vulnerability
High
CVE-2018-18854
Uncontrolled Resource Consumption in spray-json
High
CVE-2018-1321
High severity vulnerability that affects org.apache.syncope:syncope-core
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.