Critical
CVE-2019-10749
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
CVE-2019-15485
Cross-site Scripting in Bolt
High
CVE-2019-18835
Improper Verification of Cryptographic Signature in matrix-synapse
Medium
1a0fcd50-e9d6-49a5-979f-61f953b1a1cd
Safe SVG <= 1.9.5 - Cross-Site Scripting
Medium
CVE-2019-25151
Funnel Builder <= 1.3.0 - Arbitrary Plugin Activation
Critical
CVE-2019-10748
SQL Injection in sequelize
Medium
CVE-2019-10755
Use of Cryptographically Weak Pseudo-Random Number Generator in org.pac4j:pac4j-saml
High
CVE-2013-5123
Improper Authentication in pip
Medium
CVE-2019-18854
Safe SVG <= 1.9.4 - Denial of Service
High
7886708a-8daa-465b-b820-53bf409e682c
Tidio Live Chat < 4.2.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
CVE-2019-18855
Safe SVG <= 1.9.4 - Denial of Service
Medium
CVE-2019-18668
Currency Switcher <= 2.11.1 - Authorization Bypass
Critical
CVE-2009-5042
python-docutils allows insecure usage of temporary files
Medium
CVE-2018-21030
Cross-site scripting in Jupyter Notebook
Medium
CVE-2019-16251
YIT Plugin Framework <= 3.3.8 - Authenticated Settings Change
Medium
CVE-2020-20627
GiveWP <= 2.5.9 - Missing Authorization to Settings Update
Critical
CVE-2019-16942
Polymorphic Typing in FasterXML jackson-databind
High
CVE-2012-5577
Incorrect Default Permissions in keyring
High
CVE-2020-7055
Elementor Website Builder <= 2.7.4 - Arbitrary File Upload
Critical
CVE-2019-10752
SQL Injection in sequelize
Medium
CVE-2017-15703
Denial of service via deserialization attack in nifi
Medium
CVE-2019-10756
Cross-site Scripting in node-red-dashboard
High
CVE-2019-25150
Email Templates <= 1.3 - HTML Injection
Medium
CVE-2019-25148
WP HTML Mail < 2.9.1 - HTML Injection
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.