Critical
CVE-2019-8149
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
High
CVE-2019-8154
Magento remote code execution vulnerability
High
CVE-2019-17221
PhantomJS Arbitrary File Read
Medium
CVE-2019-16904
TeamPass Cross-site Scripting (XSS) vulnerability
Medium
CVE-2019-10430
Jenkins NeuVector Vulnerability Scanner Plugin stored credentials in plain text
Medium
CVE-2019-10426
Jenkins Gem Publisher Plugin stores credentials as plaintext
High
CVE-2019-10428
Jenkins Aqua Security Scanner Plugin showed plain text password in configuration form
Medium
CVE-2019-10407
Project Inheritance Plugin showed secret environment variables defined in Mask Passwords Plugin
Medium
CVE-2019-10427
Jenkins Aqua MicroScanner Plugin showed plain text credential in configuration form
Medium
CVE-2019-10429
Jenkins GitLab Logo Plugin stores credentials unencrypted
Medium
CVE-2019-10406
Improper Neutralization of Input During Web Page Generation in Jenkins
Medium
CVE-2019-10405
Exposure of Sensitive Information to an Unauthorized Actor in Jenkins
Medium
CVE-2019-10404
Improper Neutralization of Input During Web Page Generation in Jenkins
Medium
CVE-2019-10402
Improper Neutralization of Input During Web Page Generation in Jenkins
Medium
CVE-2019-10401
Improper Neutralization of Input During Web Page Generation in Jenkins
Medium
CVE-2019-10403
Improper Neutralization of Input During Web Page Generation in Jenkins
Critical
CVE-2019-7139
Magento 2 Community Edition SQLi Vulnerability
Critical
CVE-2019-0195
Deserialization of Untrusted Data in Apache Tapestry
Medium
CVE-2019-12922
phpMyAdmin Cross-Site Request Forgery (CSRF)
Medium
CVE-2019-1302
Elevation of privilege in ASP.NET Core
Critical
CVE-2019-16227
An issue was discovered in py-lmdb 0.97. For certain values of mn_flags, mdb_cursor_set triggers a memcpy with an invalid write operation within mdb_xcursor_init1. NOTE: this outcome occurs when acces
High
CVE-2019-12401
Apache Solr vulnerable to XML Bomb
Medium
CVE-2019-15484
Bolt Cross-site Scripting (XSS) via an image's alt or title field
Medium
CVE-2019-15489
laracom Cross-site Scripting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.