High
CVE-2019-10754
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2019-12407
Cross-site Scripting in Apache JSPWiki
High
CVE-2018-21019
Home Assistant before 0.67.0 was vulnerable to an information disclosure that allowed an unauthenticated attacker to read the application's error log via components/api.py.
Medium
CVE-2019-16669
Pagekit User enumeration
Low
CVE-2019-16370
Use of a weak cryptographic algorithm in Gradle
High
CVE-2019-16317
Pimcore RCE via PHAR upload
High
CVE-2019-16318
Pimcore Unrestricted Upload of File with Dangerous Type
Medium
CVE-2019-10399
Sandbox bypass vulnerability in Jenkins Script Security Plugin
Medium
CVE-2019-10394
Sandbox bypass vulnerability in Jenkins Script Security Plugin
Medium
CVE-2019-10400
Sandbox bypass vulnerability in Jenkins Script Security Plugin
Low
CVE-2019-10397
Jenkins Aqua Security Serverless Scanner Plugin showed plain text password in job configuration form fields
Low
CVE-2019-10398
Jenkins Beaker Builder Plugin has Insufficiently Protected Credentials
Medium
CVE-2019-10396
Jenkins Dashboard View Plugin vulnerable to Cross-site Scripting
Medium
CVE-2019-10395
Jenkins Build Environment Plugin vulnerable to Cross-site Scripting
Medium
CVE-2019-10393
Sandbox bypass vulnerability in Script Security Plugin
High
CVE-2019-10392
Improper Neutralization of Special Elements used in an OS Command in Jenkins Git Client Plugin
High
CVE-2019-16228
An issue was discovered in py-lmdb 0.97. There is a divide-by-zero error in the function mdb_env_open2 if mdb_env_read_header obtains a zero value for a certain size field. NOTE: this outcome occurs w
Critical
CVE-2019-16224
An issue was discovered in py-lmdb 0.97. For certain values of md_flags, mdb_node_add does not properly set up a memcpy destination, leading to an invalid write operation. NOTE: this outcome occurs wh
Critical
CVE-2019-16225
An issue was discovered in py-lmdb 0.97. For certain values of mp_flags, mdb_page_touch does not properly set up mc->mc_pg[mc->top], leading to an invalid write operation. NOTE: this outcome occurs wh
High
CVE-2019-16226
An issue was discovered in py-lmdb 0.97. mdb_node_del does not validate a memmove in the case of an unexpected node->mn_hi, leading to an invalid write operation. NOTE: this outcome occurs when access
Medium
CVE-2019-16173
Cross-site Scripting in LimeSurvey
Medium
CVE-2019-16147
Liferay Portal Vulnerable to Cross-Site Scripting (XSS) via a Journal Article Title
Medium
CVE-2019-16172
Cross-site Scripting in LimeSurvey
Critical
CVE-2019-10665
LibreNMS Information Disclosure
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.