High
CVE-2017-2646
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,071
Reset filters
High
CVE-2016-8609
Improper Authentication in org.keycloak:keycloak-core
Medium
CVE-2016-8629
Moderate severity vulnerability that affects org.keycloak:keycloak-core
Medium
CVE-2017-2585
keycloak-core vulnerable to timing attacks against JWS token verification
High
CVE-2017-3163
Improper Limitation of a Pathname ('Path Traversal') in org.apache.solr:solr-core
High
CVE-2016-5007
Spring Security and Spring Framework may not recognize certain paths that should be protected
High
CVE-2015-5211
Files or Directories Accessible to External Parties in org.springframework:spring-core
Medium
CVE-2015-3192
Pivotal Spring Framework DoS Attack with XML Input
Medium
CVE-2015-0201
Moderate severity vulnerability that affects org.springframework:spring-core
Critical
CVE-2018-1275
Spring Framework has Improperly Implemented Security Check for Standard
High
CVE-2018-1272
Possible privilege escalation in org.springframework:spring-core
Medium
CVE-2018-1271
Path Traversal in org.springframework:spring-core
Critical
CVE-2018-1270
Spring Framework allows applications to expose STOMP over WebSocket endpoints
High
CVE-2018-1258
Spring Framework when used in combination with any versions of Spring Security contains an authorization bypass
Medium
CVE-2018-1257
Denial of Service in org.springframework:spring-core
Medium
CVE-2018-1199
Improper Input Validation in org.springframework.security:spring-security-core, org.springframework.security:spring-security-core , and org.springframework:spring-core
Critical
CVE-2017-12629
Remote code execution occurs in Apache Solr
Medium
CVE-2018-8010
There is a XML external entity expansion (XXE) vulnerability in Apache Solr config files
High
CVE-2018-1308
There is a XML external entity expansion (XXE) vulnerability in Apache Solr
Medium
CVE-2018-8026
XML external entity expansion in org.apache.solr:solr-core
High
CVE-2018-17297
Unzip function in ZipUtil.java in Hutool allows remote attackers to overwrite arbitrary files via directory traversal
Medium
CVE-2018-8023
Moderate severity vulnerability that affects org.apache.mesos:mesos
High
CVE-2018-17785
In blynk-server a Directory Traversal exists
Medium
CVE-2018-1332
Moderate severity vulnerability that affects org.apache.storm:storm-core
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.