Critical
CVE-2018-7269
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,687
Critical
CVE-2019-17625
Rambox RCE Vulnerability
Medium
CVE-2019-17576
Dolibarr Cross-site Scripting via outgoing email setup feature
Medium
CVE-2019-17577
Dolibarr Cross-site Scripting via outgoing email setup feature
Medium
CVE-2019-17578
Dolibarr Cross-site Scripting vulnerability
Critical
CVE-2019-16699
sr_freecap for Typo3 RCE Vulnerability
Critical
CVE-2019-16700
slub_events for Typo3 Arbitrary File Upload
Medium
CVE-2019-17223
Dolibarr ERP and CRM HTML Injection
High
CVE-2019-16682
url_redirect for Typo3 SQLi Vulnerability
Medium
CVE-2019-16698
direct_mail for Typo3 sensitive data exposure
Critical
CVE-2019-13116
Mulesoft Mule Unsafe Deserialization
Critical
CVE-2019-10458
Incorrect Authorization in Puppet Enterprise Pipeline Jenkins Plugin
Medium
CVE-2019-10457
Missing permission check in Jenkins Oracle Cloud Infrastructure Compute Classic Plugin
Medium
CVE-2019-10449
Jenkins Fortify on Demand Plugin stores credentials in plain text
Medium
CVE-2019-10454
Jenkins Rundeck Plugin CSRF vulnerability
Medium
CVE-2019-10452
Jenkins View26 Test-Reporting Plugin stores access token in plain text
Medium
CVE-2019-10456
Jenkins Oracle Cloud Infrastructure Compute Classic Plugin cross-site request forgery vulnerability
Medium
CVE-2019-10451
Jenkins SOASTA CloudTest Plugin stores API token in plain text
Medium
CVE-2019-10455
Missing permission check in Jenkins Rundeck Plugin
High
CVE-2019-10453
Jenkins Delphix Plugin vulnerable to Cleartext credential storage
Low
CVE-2019-10450
Cleartext Storage of Sensitive Information in Jenkins ElasticBox CI Plugin
Medium
CVE-2019-10439
Jenkins CRX Content Package Deployer Plugin subject to credentials enumeration via Missing Authorization
High
CVE-2019-10440
Jenkins NeoLoad Plugin stores credentials in cleartext
High
CVE-2019-10443
Jenkins iceScrum Plugin stores credentials in Cleartext
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.