Medium
CVE-2018-16551
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,690
Medium
CVE-2018-0503
Mediawiki Improper Privilege Management
High
CVE-2013-7400
The Direct Mail (direct_mail) TYPO3 extension improperly discloses sensitive information
Medium
CVE-2018-0505
Mediawiki BotPassword can bypass CentralAuth's account lock
Medium
CVE-2018-20758
MODX vulnerability allows for XSS via user settings parameters
Medium
CVE-2016-4987
Jenkins Image Gallery Plugin allows Path Traversal
Medium
CVE-2018-0504
Mediawiki information disclosure vulnerability
Medium
CVE-2016-3101
Jenkins Extra Columns Plugin allows Cross-Site Scripting (XSS)
High
CVE-2016-4986
Jenkins TAP Plugin allows Path Traversal
Medium
CVE-2016-4988
Cross-site Scripting in Jenkins Build Failure Analyzer plugin
Medium
CVE-2018-1002201
Improper Limitation of a Pathname to a Restricted Directory in zt-zip
High
CVE-2017-12974
Improper Verification of Cryptographic Signature in Nimbus JOSE+JWT
High
CVE-2017-12972
Nimbus JOSE+JWT missing overflow check
Medium
CVE-2011-4941
Piwik (now Matomo) Vulnerable to Arbitrary Code Execution
Medium
CVE-2013-2633
Piwik (now Matomo) Reveals Sensitive Information by Accepting Input from `POST` Requests
Low
CVE-2013-1844
Piwik (now Matomo) Vulnerable to Cross-Site Scripting (XSS)
High
CVE-2018-13864
Play Framework's Assets controller vulnerable to directory traversal
Medium
CVE-2018-1000426
Stored XSS vulnerability in Jenkins Git Changelog Plugin
Medium
CVE-2018-1999033
Exposure of sensitive information in Anchore Container Image Scanner Jenkins Plugin
Medium
CVE-2015-3171
sosreport 3.2 uses weak permissions for generated sosreport archives, which allows local users with access to /var/tmp/ to obtain sensitive information by reading the contents of the archive.
High
CVE-2014-3526
Apache Wicket Sensitive Data Exposure
High
CVE-2018-10054
Improper Input Validation in Datomic
High
CVE-2015-7539
Jenkins does not Verify Checksums for Plugin Files
High
CVE-2015-7537
Jenkins Vulnerable to Cross-Site Request Forgery (CSRF) Attack
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.