Medium
CVE-2019-12616
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,737
Critical
CVE-2019-11768
phpMyAdmin SQL injection in Designer feature
High
CVE-2019-12728
Incorrect Resource Transfer Between Spheres in Grails
Medium
CVE-2019-6588
Liferay Portal Allows Cross-Site Scripting (XSS) via the SimpleCaptcha API
Medium
CVE-2019-3895
An access-control flaw was found in the Octavia service when the cloud platform was deployed using Red Hat OpenStack Platform Director. An attacker could cause new amphorae to run based on any arbitra
Medium
CVE-2019-11876
PrestaShop Cross-site Scripting vulnerability
Critical
CVE-2017-11365
Symfony Incorrect Access Control
Critical
CVE-2019-12277
Blogifier does not properly restrict APIs
Medium
CVE-2019-10320
Insertion of Sensitive Information into Externally-Accessible File or Directory in Jenkins Credentials Plugin
High
CVE-2016-10750
Deserialization of Untrusted Data in Hazelcast
High
CVE-2019-0981
Denial of service in ASP.NET Core
High
CVE-2019-0982
Denial of service in ASP.NET Core
Medium
CVE-2019-12139
ezplatform-admin-ui Cross-site Scripting (XSS) vulnerability
High
CVE-2019-0980
Denial of service in ASP.NET Core
Critical
CVE-2016-7043
Password in config file in KIE server
High
CVE-2019-11842
matrix-sydent and matrix-synapse Use Cryptographically Weak PRNG
Medium
CVE-2019-0226
Apache Karaf vulnerable to relative path traversal
Critical
CVE-2019-11830
PharStreamWrapper for Typo3 unsafe deserialization vulnerability
High
CVE-2019-11819
Alkacon OpenCMS CSV Injection via New User module
High
CVE-2019-10249
Potentially compromised builds
Medium
CVE-2018-13983
ImpressCMS XSS
Medium
CVE-2019-11767
phpBB Server side request forgery (SSRF)
High
CVE-2019-9826
phpBB Denial of Service
Low
CVE-2019-10318
Jenkins Azure AD Plugin stored the client secret unencrypted
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.