High
CVE-2018-1048
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Medium
CVE-2018-14642
Exposure of Sensitive Information to an Unauthorized Actor in Undertow
High
CVE-2017-11422
Statamic framework Incorrect Permission Assignment
Medium
CVE-2013-7398
Insufficient Verification of Data Authenticity in Async Http Client
Medium
CVE-2013-7397
Insufficient Verification of Data Authenticity in Async Http Client
High
CVE-2019-9185
Bolt Unrestricted Upload of File with Dangerous Type
High
CVE-2019-10874
Bolt Cross Site Request Forgery (CSRF)
Medium
CVE-2017-16754
Bolt Improper Access Control
Medium
CVE-2013-4444
Apache Tomcat Unrestricted file upload vulnerability
Medium
CVE-2017-6484
INTER-Mediator Cross-Site Scripting (XSS)
High
CVE-2017-5594
Pagekit Weak Password Recovery Mechanism for Forgotten Password
High
CVE-2017-8028
Improper Authentication in Pivotal Spring-LDAP
High
CVE-2015-6926
OXID eShop user impersonation vulnerability
High
CVE-2017-8874
Mautic Cross-Site Request Forgery (CSRF)
Critical
CVE-2017-1000487
OS Command Injection in Plexus-utils
High
CVE-2016-4978
Apache ActiveMQ Artemis RCE Via Deserialization Gadget Chain
High
CVE-2017-12174
Uncontrolled Resource Consumption in Artemis and HornetQ
Critical
CVE-2018-9019
Dolibarr SQL Injection vulnerability
Medium
CVE-2016-2402
Improper Certificate Validation in OkHttp
High
CVE-2016-4970
Loop with Unreachable Exit Condition in Netty
Medium
CVE-2016-10027
Smack allows the bypass of TLS protections
Low
CVE-2017-15709
ActiveMQ's OpenWire protocol exposes certain system details as plain text
Medium
CVE-2014-8991
pip 1.3 through 1.5.6 allows local users to cause a denial of service (prevention of package installation) by creating a /tmp/pip-build-* file for another user.
High
CVE-2018-16552
MicroPyramid Django-CRM 0.2 allows CSRF for /users/create/, /users/##/edit/, and /accounts/##/delete/ URIs.
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.