Low
CVE-2019-16543
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,638
Low
CVE-2019-16545
Jenkins QMetry for JIRA Plugin shows plain text password in configuration form
High
CVE-2019-16540
Jenkins Support Core Plugin allowed users with Overall/Read permission to delete arbitrary files
Medium
CVE-2019-16548
Jenkins Google Compute Engine Plugin Cross-Site Request Forgery vulnerability
Medium
CVE-2019-16544
Jenkins QMetry for JIRA Plugin stored credentials in plain text
Medium
CVE-2019-16547
Jenkins Google Compute Engine Plugin Missing Authorization vulnerability
Medium
CVE-2019-16546
Jenkins Google Compute Engine Plugin does not verify SSH host keys when connecting agents created by the plugin
Medium
CVE-2019-16539
Missing permission check in Jenkins Support Core Plugin
Medium
CVE-2019-16541
Jenkins JIRA Plugin allows users to select and use credentials with System scope
High
CVE-2019-16538
Incorrect Authorization in Jenkins Script Security Plugin
Medium
CVE-2019-16542
Jenkins Anchore Container Scanner Plugin vulnerable to Insufficiently Protected Credentials
Medium
CVE-2019-18982
Pimcore Cross-site Scripting (XSS) vulnerability
Critical
CVE-2019-18985
Pimcore 2FA Vulnerable to Brute Forcing
Critical
CVE-2019-18981
Pimcore Access Control Issues
High
CVE-2019-18986
Pimcore Discloses Usernames In Use
High
CVE-2019-12408
It was discovered that the C++ implementation (which underlies the R, Python and Ruby implementations) of Apache Arrow 0.14.0 to 0.14.1 had a uninitialized memory bug when building arrays with null va
Medium
CVE-2019-8232
Magento 2 Community Edition RCE Vulnerability
High
CVE-2019-8231
Magento Remote code execution through catalog attribute sets
High
CVE-2019-8150
Magento 2 Community Edition RCE Vulnerability
Medium
CVE-2019-8157
Magento Cross-Site Scripting via admin panel
High
CVE-2019-8156
Magento 2 Community Edition SSRF vulnerability
High
CVE-2019-8151
Magento Server-Side Request Forgery (SSRF)
High
CVE-2019-8159
Magento 2 Community Edition RCE Vulnerability
Critical
CVE-2019-8158
Magento 2 Community Edition XML Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.