Medium
CVE-2018-10890
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,686
Medium
CVE-2018-10889
Moodle sensitive information disclosure
Medium
CVE-2018-14636
Live-migrated instances are briefly able to inspect traffic for other instances on the same hypervisor. This brief window could be extended indefinitely if the instance's port is set administratively
Medium
CVE-2018-14631
Moodle Cross-site Scripting
High
CVE-2018-14630
Moodle XML import of ddwtos could lead to intentional remote code execution
Medium
CVE-2018-14658
Keycloak Open Redirect
Medium
CVE-2018-14655
Keycloak vulnerable to cross-site scripting via the state parameter
High
CVE-2018-15761
Cloud Foundry UAA Privilege Escalation
High
CVE-2018-16849
A flaw was found in openstack-mistral. By manipulating the SSH private key filename, the std.ssh action can be used to disclose the presence of arbitrary files within the filesystem of the executor ru
Medium
CVE-2018-17247
Improper Restriction of XML External Entity Reference in Elasticsearch
Medium
CVE-2018-17244
Exposure of Sensitive Information to an Unauthorized Actor in Elasticsearch
High
CVE-2018-16854
Moodle Login CSRF vulnerability in login form
High
CVE-2018-1051
Deserialization of Untrusted Data in org.jboss.resteasy:resteasy-yaml-provider
High
CVE-2018-1082
Moodle Improper Authentication
Medium
CVE-2018-1114
Uncontrolled Resource Consumption in Undertow
High
CVE-2018-1131
Deserialization of Untrusted Data in Infinispan
Medium
CVE-2018-1229
Cross-site Scripting in Pivotal Spring Batch Admin
High
CVE-2018-3758
express-cart unrestricted file upload vulnerability
Medium
CVE-2018-3771
statics-server Cross-site Scripting vulnerability
Medium
CVE-2018-3824
Elasticsearch subject to cross site scripting
Critical
CVE-2018-6333
Nuclide Improper Input Validation
Medium
CVE-2019-1003013
Cross-site Scripting in Jenkins Blue Ocean Plugin
Medium
CVE-2019-1003014
Jenkins Config File Provider Plugin XSS vulnerability
High
CVE-2019-1003008
Jenkins Warnings Next Generation Plugin cross-site request forgery vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.