Critical
CVE-2019-16943
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,072
Reset filters
Medium
CVE-2019-13236
XSS issues in the management interface
Medium
CVE-2019-13235
XSS in login form
Medium
CVE-2019-13237
Local file inclusion allows unauthorized access to internal resources in Alkacon OpenCms
Medium
CVE-2019-13234
XSS in search engine
Medium
CVE-2019-12406
Potential DOS attack due to unrestricted attachment count in messages
Critical
CVE-2019-12419
Potential session hijack in Apache CXF
Medium
CVE-2019-10755
Use of Cryptographically Weak Pseudo-Random Number Generator in org.pac4j:pac4j-saml
Critical
CVE-2019-16942
Polymorphic Typing in FasterXML jackson-databind
Medium
CVE-2017-15703
Denial of service via deserialization attack in nifi
High
CVE-2019-11284
Insufficiently Protected Credentials in Pivotal Reactor Netty
High
CVE-2019-17513
io.ratpack:ratpack-core vulnerable to Improper Neutralization of Special Elements in Output ('Injection')
High
CVE-2019-17359
Out-of-Memory Error in Bouncy Castle Crypto
Critical
CVE-2019-17195
Improper Check for Unusual or Exceptional Conditions in Connect2id Nimbus JOSE+JWT
Critical
CVE-2019-17495
Cross-site scripting in Swagger-UI
Medium
CVE-2019-12404
Cross-site scripting in Apache JSPWiki
Medium
CVE-2019-10089
Cross-site scripting in Apache JSPWiki
Medium
CVE-2019-10087
Cross-site scripting in Apache JSPWiki
Medium
CVE-2019-10090
Cross-site scripting in Apache JSPWiki
High
CVE-2019-16869
HTTP Request Smuggling in Netty
High
CVE-2019-12402
Denial of Service in Apache Commons Compress
Critical
CVE-2019-10071
Timing attack on HMAC signature comparison in Apache Tapestry
Critical
CVE-2019-16335
Polymorphic Typing issue in FasterXML jackson-databind
Critical
CVE-2019-14540
Polymorphic Typing issue in FasterXML jackson-databind
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.