High
CVE-2018-1256
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Medium
CVE-2018-1263
spring-integration-zip Arbitrary File Write
High
CVE-2018-1262
UAA privilege escalation across identity zones
Low
CVE-2015-3189
Cloud Foundry Runtime has Weak Password Recovery Mechanism for Forgotten Password
Critical
CVE-2015-5172
Cloud Foundry Runtime has Weak Password Recovery Mechanism for Forgotten Password
Critical
CVE-2015-5171
Cloud Foundry Runtime Insufficient Session Expiration vulnerability
High
CVE-2015-5170
Cloud Foundry Runtime Cross-Site Request Forgery vulnerability
Medium
CVE-2017-7251
Pi Cross-site Scripting vulnerability
Medium
CVE-2019-6804
Rundeck Community Edition vulnerable to Cross-site Scripting
High
CVE-2015-5237
protobuf allows remote authenticated attackers to cause a heap-based buffer overflow.
Critical
CVE-2018-9110
Directory Traversal in Studio 42 elFinder
Medium
CVE-2019-5884
Sensitive Data Exposure in elFinder
Critical
CVE-2018-9109
elFinder Path Traversal vulnerability
High
CVE-2019-6257
elFinder Server Side Request Forgery (SSRF)
Medium
CVE-2016-0767
PostgreSQL PL/Java Improper Privilege Management
Critical
CVE-2017-7550
A flaw was found in the way Ansible (2.3.x before 2.3.3, and 2.4.x before 2.4.1) passed certain parameters to the jenkins_plugin module. Remote attackers could use this flaw to expose sensitive inform
High
CVE-2018-8012
Missing Authorization in Apache ZooKeeper
Medium
CVE-2013-2172
Inefficient Algorithmic Complexity in Apache Santuario XML Security
Medium
CVE-2013-4517
Improper Input Validation in Apache Santuario XML Security
Medium
CVE-2014-8152
Improper Input Validation in Apache Santuario XML Security
Medium
CVE-2015-0886
Integer Overflow or Wraparound in JBCrypt
Medium
CVE-2018-14773
Symfony HTTP Foundation web cache poisoning
Medium
CVE-2013-3630
Moodle Authenticated Spelling Binary Remote Code Execution
High
CVE-2014-0107
Improper Authorization in Apache Xalan-Java
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.