Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: playframework Component: Play Framework Clear all filters
TI-2014-02951 CVE-2014-3630 · GHSA-xpw4-hqm8-rj97

XML external entity (XXE) vulnerability in the Java XML processing functionality in Play…

Priority MEDIUM 47

XML external entity (XXE) vulnerability in the Java XML processing functionality in Play before 2.2.6 and 2.3.x before 2.3.5 might allow remote attackers to read arbitrary files, cause a denial of service, or have unspec…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02925 Published 2017-12-29 No fix listed CWE-611
TI-2015-01932 CVE-2015-2156 · GHSA-xfv3-rrfm-f2rv

Netty before 3.9.8.Final, 3.10.x before 3.10.3.Final, 4.0.x before 4.0.28.Final, and…

Priority MEDIUM 41

Netty before 3.9.8.Final, 3.10.x before 3.10.3.Final, 4.0.x before 4.0.28.Final, and 4.1.x before 4.1.0.Beta5 and Play Framework 2.x before 2.3.9 might allow remote attackers to bypass the httpOnly flag on cookies and ob…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.05222 Published 2017-10-18 Partial fix · 4.0.28.Final, 3.9.8.Final +1 CWE-20