Medium
CVE-2019-17572
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2019-2692
Privilege escalation in mysql-connector-jav
Medium
eedada2a-5543-46b1-a3d2-5e5b86a05ff9
Careerfy - Job Board WordPress Theme <= 3.9.0 - Reflected Cross-Site Scripting
Medium
8a253b04-bbe9-42d1-b6d9-1a62ad37855c
WassUp Real Time Analytics <= 1.9.4.4 - Cross-Site Scripting
Medium
7dd6f9d2-e6c2-49fa-a4bb-1f2126809a06
Careerfy - Job Board WordPress Theme <= 3.9.0 - Authenticated Stored Cross-Site Scripting
Medium
23b75226-e7c9-4b22-aa1b-1a7d400856d2
Careerfy - Job Board WordPress Theme <= 3.9.0 - Authenticated Stored Cross-Site Scripting
Medium
2002fa81-3a4f-4a88-ba52-ed06969d51a3
Careerfy - Job Board WordPress Theme <= 3.9.0 - Authenticated Stored Cross-Site Scripting
High
CVE-2017-7957
Denial of service in XStream
High
CVE-2016-3674
XML External Entity Injection in XStream
Medium
CVE-2014-3488
Denial of service in Netty
High
CVE-2015-2156
Information Exposure in Netty
High
CVE-2018-5968
Deserialization of Untrusted Data in jackson-databind
High
CVE-2020-15087
Privilege escalation in Presto
High
CVE-2020-15084
Authorization bypass in express-jwt
Medium
ghsa-g753-jx37-7xwh
ECDSA signature vulnerability of Minerva timing attack in jsrsasign
Medium
f9dc401e-0247-4f49-8092-8841ea6c1f90
Workup – Job Board WordPress Theme <= 2.1.5 - Reflected Cross-Site Scripting
High
CVE-2017-8875
Clean Login <= 1.10.3 - Cross-Site Request Forgery
Critical
b6b43503-e6f0-4097-9e41-eaae7011b17b
Nexos - Real Estate WordPress Theme <= 1.7 - SQL Injection
Medium
18dacb4b-7eb7-4de2-b889-e36c11ad4a04
Nexos - Real Estate <= 1.7 - Reflected Cross-Site Scripting
High
CVE-2021-24892
Advanced Forms for ACF <= 1.6.8 - Insecure Direct Object Reference
High
CVE-2020-14966
ECDSA signature validation vulnerability by accepting wrong ASN.1 encoding in jsrsasign
Critical
CVE-2020-14967
RSA PKCS#1 decryption vulnerability with prepending zeros in jsrsasign
Critical
CVE-2020-14968
RSA-PSS signature validation vulnerability by prepending zeros in jsrsasign
Medium
CVE-2020-4072
Log Forging in generator-jhipster-kotlin
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.