High
CVE-2015-5237
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Critical
CVE-2018-9110
Directory Traversal in Studio 42 elFinder
Medium
CVE-2019-5884
Sensitive Data Exposure in elFinder
Critical
CVE-2018-9109
elFinder Path Traversal vulnerability
High
CVE-2019-6257
elFinder Server Side Request Forgery (SSRF)
Medium
CVE-2016-0767
PostgreSQL PL/Java Improper Privilege Management
Critical
CVE-2017-7550
A flaw was found in the way Ansible (2.3.x before 2.3.3, and 2.4.x before 2.4.1) passed certain parameters to the jenkins_plugin module. Remote attackers could use this flaw to expose sensitive inform
High
CVE-2018-8012
Missing Authorization in Apache ZooKeeper
Medium
CVE-2013-2172
Inefficient Algorithmic Complexity in Apache Santuario XML Security
Medium
CVE-2013-4517
Improper Input Validation in Apache Santuario XML Security
Medium
CVE-2014-8152
Improper Input Validation in Apache Santuario XML Security
Medium
CVE-2015-0886
Integer Overflow or Wraparound in JBCrypt
Medium
CVE-2018-14773
Symfony HTTP Foundation web cache poisoning
Medium
CVE-2013-3630
Moodle Authenticated Spelling Binary Remote Code Execution
High
CVE-2014-0107
Improper Authorization in Apache Xalan-Java
Medium
CVE-2014-3004
Improper Restriction of XML External Entity Reference in Castor
Medium
CVE-2017-12061
MantisBT XSS allows unsanitized input via admin/install.php
High
CVE-2018-13982
Smarty Path Traversal Vulnerability
High
CVE-2019-1003003
Improper Authorization in Jenkins Core
High
CVE-2019-1003004
Improper Authorization in Jenkins Core
High
CVE-2018-12613
phpMyAdmin Improper Authentication
Medium
CVE-2019-3848
Moodle Logged in users could view all calendar events
Medium
CVE-2019-3847
Moodle XSS Vulnerability
Medium
CVE-2019-3810
Moodle XSS Vulnerability
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.