Medium
CVE-2018-19790
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2018-19789
Symfony Path Disclosure
High
CVE-2017-12869
SimpleSAMLphp Authentication context bypass in the multiauth module
Medium
CVE-2017-18121
SimpleSAMLphp XSS Vulnerability
High
CVE-2017-18122
SimpleSAMLphp Signature validation bypass
Medium
CVE-2017-12872
SimpleSAMLphp allows timing side-channel attacks
High
CVE-2016-6346
Denial of service in JBoss resteasy
High
CVE-2018-1000074
RubyGems Deserialization of Untrusted Data vulnerability
Critical
CVE-2018-1000076
RubyGems Improper Verification of Cryptographic Signature vulnerability
Medium
CVE-2018-1000078
RubyGems Cross-site Scripting vulnerability
Medium
CVE-2018-1000077
RubyGems Improper Input Validation vulnerability
Medium
CVE-2017-18357
Shopware XXE Vulnerability
Critical
CVE-2016-9299
Improper Neutralization of Special Elements used in an LDAP Query in Jenkins
High
CVE-2017-1000244
Jenkins Favorite Plugin vulnerable to Cross-Site Request Forgery
Critical
CVE-2017-12633
Apache Camel camel-hessian component vulnerable to Java object deserialization
Medium
CVE-2016-1494
The verify function in the RSA package for Python (Python-RSA) before 3.3 allows attackers to spoof signatures with a small public exponent via crafted signature padding, aka a BERserk attack.
High
CVE-2017-15089
Deserialization of Untrusted Data in Infinispan
Medium
CVE-2017-1000386
Cross-site Scripting in Jenkins Active Choices plugin
High
CVE-2017-7675
Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat
Medium
CVE-2017-1000113
Jenkins Deploy to container Plugin stored plain text passwords in job configuration
Medium
CVE-2018-1325
Cross-site Scripting in wicket-jquery-ui
Medium
CVE-2017-15719
Cross-site Scripting in wicket-jquery-ui
Critical
CVE-2018-1000120
curl FTP path confusion leads to NIL byte out of bounds write
Medium
CVE-2017-15691
Improper Restriction of XML External Entity Reference in Apache uimaj
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.