Medium
CVE-2018-11784
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,071
Reset filters
High
Exploited in attacks
CVE-2017-12615
When running Apache Tomcat on Windows with HTTP PUTs enabled it was possible to upload a JSP file to the server
Medium
CVE-2015-7940
Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15
High
CVE-2016-1000352
In Bouncy Castle JCE Provider the ECIES implementation allowed the use of ECB mode
Low
CVE-2016-1000346
In Bouncy Castle JCE Provider the other party DH public key is not fully validated
High
CVE-2016-1000343
In Bouncy Castle JCE Provider the DSA key pair generator generates a weak private key if used with default values
High
CVE-2016-1000342
In Bouncy Castle JCE Provider ECDSA does not fully validate ASN.1 encoding of signature on verification
Medium
CVE-2016-1000341
Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15
High
CVE-2016-1000340
The Bouncy Castle JCE Provider carry a propagation bug
Medium
CVE-2016-1000339
Moderate severity vulnerability that affects org.bouncycastle:bcprov-jdk14 and org.bouncycastle:bcprov-jdk15
High
CVE-2016-1000338
In Bouncy Castle JCE Provider it is possible to inject extra elements in the sequence making up the signature and still have it validate
Critical
CVE-2018-1000613
Deserialization of Untrusted Data in Bouncy castle
Critical
CVE-2018-12542
Eclipse Vert.x does not properly neutralize '' (forward slashes) sequences that can resolve to an external location
Medium
CVE-2018-12544
Moderate severity vulnerability that affects io.vertx:vertx-core
Medium
CVE-2018-12541
Excessive memory allocation
High
CVE-2018-12540
High severity vulnerability that affects io.vertx:vertx-web
Medium
CVE-2018-1338
Moderate severity vulnerability that affects org.apache.tika:tika-core
Medium
CVE-2018-8017
Comparison errorr in org.apache.tika:tika-core
Medium
CVE-2018-11762
Moderate severity vulnerability that affects org.apache.tika:tika-core
High
CVE-2018-11761
High severity vulnerability that affects org.apache.tika:tika-core
Critical
CVE-2016-6809
Apache Tika allows Java code execution for serialized objects embedded in MATLAB files
High
CVE-2016-4434
Apache Tika does not properly initialize the XML parser or choose handlers
Medium
CVE-2015-3271
Apache Tika Server exposes sensitive information
Medium
CVE-2018-1339
org.apache.tika:tika-parsers has an Infinite Loop vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.