Medium
CVE-2019-18954
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2019-10771
Cross-Site Scripting in iobroker.web
Medium
CVE-2019-17632
Unescaped exception messages in error responses in Jetty
High
CVE-2019-11458
Unsafe deserialization in SmtpTransport in CakePHP
Critical
CVE-2019-10913
Invalid HTTP method overrides allow possible XSS or other attacks in Symfony
Medium
CVE-2019-18886
User enumeration leak using switch user functionality in Symfony
High
CVE-2019-18888
Argument injection in a MimeTypeGuesser in Symfony
Critical
CVE-2019-18889
Symfony Unsafe Cache Serialization Could Enable RCE
High
CVE-2019-10767
Arbitrary File Write in iobroker.js-controller
Medium
CVE-2019-10763
Data leakage via SQL Injection in Pimcore
High
CVE-2019-18841
Prototype Pollution in chartkick
High
CVE-2019-19118
Django allows unintended model editing
Medium
CVE-2019-19133
CSS Hero <= 4.0.3 - Reflected Cross-Site Scripting
High
CVE-2019-25142
Mesmerize <= 1.6.89 & Materialis <= 1.0.172 - Authenticated Arbitrary Options Update
Medium
CVE-2019-20141
Neon - Bootstrap Admin Theme <= 2.0 - Cross-Site Scripting
Medium
CVE-2019-20043
WordPress Core < 5.3.1 - Authorization Bypass
Medium
CVE-2019-16766
2FA bypass in Wagtail through new device path
Medium
CVE-2019-19541
ListingPro - WordPress Directory & Listing Theme < 2.0.14.5 - Stored Cross-Site Scripting
Medium
CVE-2019-19540
ListingPro - WordPress Directory & Listing Theme < 2.0.14.5 - Reflected Cross-Site Scripting
Medium
CVE-2019-19542
ListingPro - WordPress Directory & Listing Theme < 2.0.14.5 - Stored Cross-Site Scripting
Medium
CVE-2019-10195
A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way that FreeIPA's batch processing API logged operations. This in
High
CVE-2019-19275
typed-ast Out-of-bounds Read
High
CVE-2019-19274
typed-ast Out-of-bounds Read
High
CVE-2019-6027
WP Spell Check <= 7.1.9 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.