Medium
CVE-2019-10401
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,610
Medium
CVE-2019-10403
Improper Neutralization of Input During Web Page Generation in Jenkins
Critical
CVE-2019-7139
Magento 2 Community Edition SQLi Vulnerability
Critical
CVE-2019-0195
Deserialization of Untrusted Data in Apache Tapestry
Medium
CVE-2019-12922
phpMyAdmin Cross-Site Request Forgery (CSRF)
Medium
CVE-2019-1302
Elevation of privilege in ASP.NET Core
Critical
CVE-2019-16227
An issue was discovered in py-lmdb 0.97. For certain values of mn_flags, mdb_cursor_set triggers a memcpy with an invalid write operation within mdb_xcursor_init1. NOTE: this outcome occurs when acces
High
CVE-2019-12401
Apache Solr vulnerable to XML Bomb
Medium
CVE-2019-15484
Bolt Cross-site Scripting (XSS) via an image's alt or title field
Medium
CVE-2019-15489
laracom Cross-site Scripting
Medium
CVE-2019-1010199
Cross site scripting attack in ServiceStack Framework
Medium
CVE-2019-1010206
kevinsawicki/http-request Missing certificate validation
High
CVE-2019-12747
TYPO3 Vulnerable to Insecure Deserialization
Medium
CVE-2019-12748
Typo3 Cross-Site Scripting in Link Handling
Medium
CVE-2019-12935
Shopware Cross-site Scripting Vulnerability
High
CVE-2019-1024
Chakra Scripting Engine RCE Vulnerability
High
CVE-2019-1002
ChakraCore RCE via Out-of-bounds write
High
CVE-2019-1051
Chakra Scripting Engine RCE via Out-of-bounds write
High
CVE-2019-1052
Chakra Scripting Engine RCE via Out-of-bounds write
Critical
CVE-2019-10328
Unsafe entry in Script Security list of approved signatures in Pipeline Remote Loader Plugin
High
CVE-2019-10327
XML External Entity processing vulnerability in Pipeline Maven Integration Jenkins Plugin
High
CVE-2019-10329
Plaintext password storage in Jenkins InfluxDB Plugin
High
CVE-2019-10330
Improper handling of untrusted branches in Gitea Jenkins Plugin
Medium
CVE-2019-10324
Cross-site request forgery vulnerability in Jenkins Artifactory Plugin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.