High
CVE-2019-10217
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
High
CVE-2012-5578
Incorrect Default Permissions in keyring
Medium
CVE-2019-16763
Pannellum Cross-Site Scripting due to data not being sanitized for URIs or vbscript
Medium
CVE-2015-5694
Designate does not enforce the DNS protocol limit concerning record set sizes
High
ghsa-9xr8-8hmc-389f
Cross-Site Scripting in vant
Medium
CVE-2019-12417
Apache Airflow vulnerable to XSS and local file disclosure
Medium
CVE-2014-1938
Link Following in rply
Critical
CVE-2019-10766
SQL Injection in usmanhalalit/pixie
High
CVE-2019-10768
angular Prototype Pollution vulnerability
High
CVE-2019-12331
XXE in PHPSpreadsheet due to incomplete fix for previous encoding issue
High
CVE-2018-19277
XXE in PHPSpreadsheet due to encoding issue
High
CVE-2018-11768
user/group information can be corrupted across storing in fsimage and reading back from fsimage
High
CVE-2019-10764
Timing attacks might allow practical recovery of the long-term private key
Critical
CVE-2019-10212
Potential to access user credentials from the log files when debug logging enabled
High
CVE-2016-6485
Unauthenticated crypto and weak IV in Magento\Framework\Encryption
High
CVE-2019-19979
WP Maintenance <= 5.0.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Critical
CVE-2019-10910
Symfony Service IDs Allow Injection
High
CVE-2019-0207
Path traversal attack on Windows platforms
Medium
CVE-2019-12562
Stored Cross-Site Scripting vulnerability in admin component of DotNetNuke
Critical
CVE-2019-19010
Eval injection in Supybot/Limnoria
Critical
CVE-2019-16762
Critical severity vulnerability that affects slpjs
Critical
CVE-2019-16761
Validation Bypass in slp-validate
Medium
CVE-2019-17550
Blog2Social: Social Media Auto Post & Scheduler < 5.9.0 - Reflected Cross-Site Scripting via b2s_id Parameter
Unrated
drupal-contrib-2019-089
drupal/commerce_ingenico - SA-CONTRIB-2019-089
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.