Medium
CVE-2019-1003083
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,728
Medium
CVE-2019-1003079
Missing permission check in Jenkins VMware Lab Manager Slaves Plugin
Medium
CVE-2019-1003091
Missing permission check in Jenkins SOASTA CloudTest Plugin
Medium
CVE-2019-1003081
CSRF vulnerability in Jenkins OpenShift Deployer Plugin
Medium
CVE-2019-1003087
Missing permission check in Jenkins sinatra-chef-builder Plugin
Medium
CVE-2019-1003093
Jenkins Nomad Plugin missing permission check
Medium
CVE-2019-1003097
Jenkins Crowd Integration Plugin stores credentials in plain text
Medium
CVE-2019-1003099
Jenkins openid Plugin missing permission check
Medium
CVE-2019-1003085
Jenkins Zephyr Enterprise Test Management Plugin missing permission check
Medium
CVE-2019-1003096
Jenkins TestFairy Plugin stores credentials in plain text
Critical
CVE-2017-5648
Exposure of Resource to Wrong Sphere in Apache Tomcat
Medium
CVE-2011-1571
Liferay Portal vulnerable to arbitrary command injection
Critical
CVE-2013-4366
Hostname verification in Apache HttpClient 4.3 was disabled by default
Critical
CVE-2017-17458
In Mercurial before 4.4.1, it is possible that a specially malformed repository can cause Git subrepositories to run arbitrary code in the form of a .git/hooks/post-update script checked into the repo
Critical
CVE-2018-13347
mpatch.c in Mercurial before 4.6.1 mishandles integer addition and subtraction, aka OVE-20180430-0002.
High
CVE-2018-13346
The mpatch_apply function in mpatch.c in Mercurial before 4.6.1 incorrectly proceeds in cases where the fragment start is past the end of the original data, aka OVE-20180430-0004.
High
CVE-2018-13348
The mpatch_decode function in mpatch.c in Mercurial before 4.6.1 mishandles certain situations where there should be at least 12 bytes remaining after the current position in the patch data, but actua
Critical
CVE-2018-1000132
Mercurial version 4.5 and earlier contains a Incorrect Access Control (CWE-285) vulnerability in Protocol server that can result in Unauthorized data access. This attack appear to be exploitable via n
High
CVE-2017-16244
October CMS CSRF
Medium
CVE-2017-15284
OctoberCMS Cross-Site Scripting
High
CVE-2017-1000119
October CMS PHP Code Execution
High
CVE-2018-1999009
October CMS Local File Inclusion
Medium
CVE-2018-7198
October CMS - RainLab Blog Plugin XSS
Critical
CVE-2017-1000194
October CMS File Upload Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.