High
CVE-2019-10390
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,690
Medium
CVE-2019-10383
Improper Neutralization of Input During Web Page Generation in Jenkins
High
CVE-2019-10384
Cross-Site Request Forgery in Jenkins
Medium
CVE-2019-10391
Jenkins IBM AppScan Plugin showed plain text password in job configuration form fields
Critical
CVE-2019-15570
BEdita vulnerable to SQL injection
Critical
CVE-2019-15563
OHDSI WebAPI vulnerable to SQL Injection
Critical
CVE-2019-15521
Spoon Library as used in Fork CMS allows PHP object injection
Medium
CVE-2019-15483
Bolt Cross-site Scripting (XSS) via a title that is mishandled in the system log
Medium
CVE-2019-15481
Kimai v2 is vulnerable to Cross-Site Scripting (XSS)
Medium
CVE-2019-7617
When the Elastic APM agent for Python versions before 5.1.0 is run as a CGI script, there is a variable name clash flaw if a remote attacker can control the proxy header. This could result in an attac
Medium
CVE-2019-15074
MantisBT allows cross-site scripting (XSS) via crafted filename
High
CVE-2019-15062
Dolibarr Cross-Site Request Forgery (CSRF)
Medium
CVE-2019-14939
MySQL for Node.js Unsafe Options
High
CVE-2019-14933
Bagisto CSRF Vulnerability
High
CVE-2019-14433
An issue was discovered in OpenStack Nova before 17.0.12, 18.x before 18.2.2, and 19.x before 19.0.2. If an API request from an authenticated user ends in a fault condition due to an external exceptio
Medium
CVE-2018-20962
Backpack\CRUD for Laravel XSS Vulnerability
Medium
CVE-2019-10388
Relution Enterprise Appstore Publisher Jenkins Plugin contains Cross-Site Request Forgery
High
CVE-2019-10380
Jenkins Simple Travis Pipeline Runner Plugin script sandbox bypass vulnerability
Medium
CVE-2019-10385
Jenkins eggplant-plugin Plugin stores credentials in plain text
High
CVE-2019-10386
Cross-site request forgery vulnerability in Jenkins XL TestView Plugin
Low
CVE-2019-10378
Jenkins TestLink Plugin stores credentials in plain text
Medium
CVE-2019-10387
Missing permission check in Jenkins XL TestView Plugin
Medium
CVE-2019-10389
Missing permission check in Jenkins Relution Enterprise Appstore Publisher Plugin
Medium
CVE-2019-10379
Jenkins Google Cloud Messaging Notification Plugin stores credentials in plain text
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.