Medium
CVE-2018-1000202
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Medium
CVE-2018-1000187
Exposure of Sensitive Information in Jenkins Kubernetes Plugin
Medium
CVE-2018-1000196
Jenkins Gitlab Hook Plugin stores and displays GitLab API token in plain text
Medium
CVE-2018-1000198
XML External Entity processing vulnerability in Jenkins Black Duck Hub Plugin
Medium
CVE-2018-1000190
Exposure of sensitive information vulnerability in Jenkins Black Duck Hub Plugin
High
CVE-2015-5346
Improper Neutralization of Input During Web Page Generation in Apache Tomcat
High
CVE-2015-5351
Apache Tomcat allows remote attackers to bypass a CSRF protection mechanism by using a token
Medium
CVE-2018-6591
Converse.js Exposure of Sensitive Information
High
CVE-2018-12036
Path Traversal in OWASP Dependency-Check
Medium
CVE-2017-18286
nZEDb Cross-site Scripting (XSS) in the 404 error page
Medium
CVE-2018-12432
Cross-site Scripting in JavaMelody
Critical
CVE-2018-11407
Symfony Authentication Bypass
Medium
CVE-2018-12290
Yii2-StateMachine extension for Yii2 XSS Vulnerability
Critical
CVE-2016-2403
Symfony Authentication Bypass
Medium
CVE-2018-11647
oauth2orize-fprm XSS vulnerability
Critical
CVE-2018-12071
CodeIgniter Session Fixation Vulnerability
Medium
CVE-2018-12581
phpMyAdmin XSS Vulnerability
Critical
CVE-2018-13448
Dolibarr SQL injection vulnerability in product/card.php
Medium
CVE-2018-12104
Cross-site scripting (XSS) vulnerability in Airbnb Knowledge Repo 0.7.4 allows remote attackers to inject arbitrary web scripts or HTML via the post comments functionality, as demonstrated by the post
Critical
CVE-2018-13447
Dolibarr SQL injection vulnerability in product/card.php
Medium
CVE-2010-1649
Joomla! vulnerable to Cross-site Scripting
Medium
CVE-2011-2509
Joomla! vulnerable to Cross-site Scripting
Critical
CVE-2011-4104
The from_yaml method in serializers.py in Django Tastypie before 0.9.10 does not properly deserialize YAML data, which allows remote attackers to execute arbitrary Python code via vectors related to t
High
CVE-2015-3220
The tlslite library before 0.4.9 for Python allows remote attackers to trigger a denial of service (runtime exception and process crash).
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.