Medium
CVE-2019-25144
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,587
Medium
0ff67beb-638e-4d74-8d0e-6aece9207bb9
About Author <= 1.3.9 - Authenticated Stored Cross-Site Scripting
High
CVE-2019-16929
Improper Authentication in Auth0.AuthenticationApi
Medium
CVE-2022-1170
Noo JobMonster < 4.5.2.9 - Reflected Cross-Site Scripting
High
CVE-2019-11284
Insufficiently Protected Credentials in Pivotal Reactor Netty
High
bc69ec54-b30f-402e-ad3b-24fd680ea72b
Groundhogg <= 1.3.11.13 - SQL Injection
Critical
CVE-2019-17426
Improper Input Validation in Automattic Mongoose
Medium
e0e70739-88c2-498e-b96c-1f27b8641cb8
Sliced Invoices <= 3.8.2 - Reflected Cross-Site Scripting
High
CVE-2019-17400
Server-Side Request Forgery in unoconv
Critical
ghsa-7cg8-pq9v-x98q
Sandbox Breakout in realms-shim
Critical
CVE-2019-10759
Sandbox Breakout / Arbitrary Code Execution in safer-eval
Critical
CVE-2019-10757
SQL Injection in knex
High
CVE-2019-17513
io.ratpack:ratpack-core vulnerable to Improper Neutralization of Special Elements in Output ('Injection')
Medium
CVE-2019-25766
Renovate vulnerable to leakage of temporary repository tokens into Pull Request comments
High
f1d2015b-86e8-4d0f-b095-f3917480ff15
Bridge Theme <= 18.2, Qode Instagram Widget <=2.0.1, Qode Twitter Feed <= 2.0.0 - Open Redirect
High
e99a7d46-a3be-4408-9000-fb43fe397dd9
InJob | Multi features for recruitment WordPress Theme < 3.3.8 - Cross-Site Scripting
High
e94e39d3-61da-4adb-a89a-97cda4c9203d
SyntaxHighlighter Evolved < 3.5.1 - Stored Cross-Site Scripting
Medium
5287cf42-6d0a-4fd2-943d-e8e44fc08576
Jetpack <= 7.9 - Stored Cross-Site Scripting
Critical
CVE-2019-10760
Sandbox Breakout / Arbitrary Code Execution in safer-eval
High
CVE-2019-17359
Out-of-Memory Error in Bouncy Castle Crypto
High
CVE-2020-20625
Sliced Invoices < 3.8.4 - Authenticated SQL Injection
Critical
CVE-2019-17195
Improper Check for Unusual or Exceptional Conditions in Connect2id Nimbus JOSE+JWT
Unrated
drupal-contrib-2019-074
drupal/bat - SA-CONTRIB-2019-074
Critical
CVE-2019-17626
XML Injection in ReportLab
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.