Medium
CVE-2015-5253
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Medium
CVE-2016-6812
Improper Neutralization of Input During Web Page Generation in Apache CXF
High
CVE-2016-8739
Improper Restriction of XML External Entity Reference in Apache CXF JAX-RS
Medium
CVE-2017-12624
Improper Input Validation in Apache CXF
Medium
CVE-2014-0110
Uncontrolled Resource Consumption in Apache CXF
Medium
CVE-2014-0109
Uncontrolled Resource Consumption in Apache CXF
Medium
CVE-2014-0035
Cleartext Transmission of Sensitive Information in Apache CXF
High
CVE-2017-5656
Session Fixation in Apache CXF
Medium
CVE-2017-5653
Improper Certificate Validation in Apache CXF
High
CVE-2017-7662
Cross-Site Request Forgery in Apache CXF Fediz
High
CVE-2017-3162
Improper Input Validation in Apache Hadoop
Medium
CVE-2017-3161
Improper Neutralization of Input During Web Page Generation in Apache Hadoop
Medium
CVE-2016-5001
Exposure of Sensitive Information to an Unauthorized Actor in Apache Hadoop
Medium
CVE-2015-5640
baserCMS Access Control Bypass
Medium
CVE-2011-2674
BaserCMS privilege escallation
High
CVE-2013-1909
The Python client in Apache Qpid before 2.2 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which all
Medium
CVE-2017-7725
Concrete CMS vulnerable to cross-site scripting (XSS)
High
CVE-2017-5637
Uncontrolled Resource Consumption in Apache ZooKeeper
Critical
CVE-2019-9115
irisnet-crypto RCE Vulnerability
High
CVE-2019-5885
Matrix Synapse before 0.34.0.1, when the macaroon_secret_key authentication parameter is not set, uses a predictable value to derive a secret key and other secrets which could allow remote attackers t
Critical
CVE-2019-5919
Nablarch Incomplete Cryptography
Critical
CVE-2019-10844
nbla/logger.cpp in libnnabla.a in Sony Neural Network Libraries (aka nnabla) through v1.0.14 relies on the HOME environment variable, which might be untrusted.
Critical
CVE-2019-10643
Contao Does Not Expire Tokens Correctly
High
CVE-2017-5661
Improper Restriction of XML External Entity Reference in Apache FOP
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.