High
CVE-2019-5484
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2019-10010
Moderate severity vulnerability that affects league/commonmark
Medium
CVE-2019-11777
Improper Handling of Exceptional Conditions and Origin Validation Error in Eclipse Paho Java client library
Critical
CVE-2019-5485
Command Injection in gitlabhook
Medium
e0f19403-af02-4a29-b4f3-778da4c2df17
Poll, Survey & Quiz Maker Plugin by Opinion Stage <= 19.6.24 - Unauthenticated Stored Cross-Site Scripting
High
CVE-2019-1301
High severity vulnerability that affects System.Management.Automation
Low
CVE-2025-25300
smartbanner.js rel noopener vulnerability
Medium
CVE-2019-16289
Woody Ad Snippets <= 2.2.8 - Authenticated Cross-Site Scripting
Medium
CVE-2019-10753
Incorrect Resource Transfer Between Spheres in eclipse-wtp
Low
CVE-2019-5483
Sensitive Data Exposure in seneca
High
CVE-2019-5475
OS Command Injection in Nexus Yum Repository Plugin
High
CVE-2019-5479
Unintended Require in larvitbase-api
Medium
CVE-2010-2273
Cross-Site Scripting in dojo
Low
ghsa-5w65-6875-rhq8
Undefined Behavior in sailsjs-cacheman
High
ghsa-cgjv-rghq-qhgp
Path Traversal in algo-httpserv
Medium
CVE-2018-1002206
Directory Traversal in SharpCompress
Medium
CVE-2019-14936
Easy!Appointments <= 1.3.2 - Information Disclosure
High
33e010dd-d9b2-410c-8397-638def946fbe
Human Presence – Stop Form Spam Without ReCaptcha < 2.0.9 - Reflected Cross-Site Scripting
Unrated
689
PayPlans - ID
Unrated
CVE-2019-12105
** DISPUTED ** In Supervisor through 4.0.2, an unauthenticated user can read log files or restart a service. Note: The maintainer responded that the affected component, inet_http_server, is not enable
Medium
CVE-2019-25315
Server Log Viewer <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
Medium
CVE-2017-18610
Magic Fields 1 <= 1.7.1 - Cross-Site Scripting via RCCWP_CreateCustomFieldPage.php custom-group-id parameter
High
CVE-2019-12516
SlickQuiz <= 1.3.7.1 - Authenticated SQL Injection
Medium
CVE-2017-18609
Magic Fields 1 <= 1.7.1 - Cross-Site Scripting via custom-write-panel-id Parameter
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.