High
CVE-2019-9153
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
CVE-2019-9154
Improper Key Verification in openpgp
High
CVE-2019-10751
Open Redirect in httpie
Medium
CVE-2019-15486
Cross-site Scripting in django-js-reverse
Medium
CVE-2019-14517
Cross-site Scripting in pandao editor.md
Medium
CVE-2019-14653
Cross-site Scripting in pandao
High
CVE-2019-14262
Uncontrolled Resource Consumption in MetadataExtractor
Critical
ghsa-rch7-f4h5-x9rj
Identity Spoofing in libp2p-secio
Medium
ghsa-65p8-3hm4-h9h8
Denial of Service in rgb2hex
High
CVE-2019-15821
Bold Page Builder <= 2.3.1 - Missing Authorization to Settings Update
High
CVE-2019-15770
WooCommerce Address Book < 1.6.0 - Cross-Site Request Forgery
High
CVE-2019-14751
NLTK Vulnerable To Path Traversal
Unrated
688
jDownloads - SQL Injection
High
CVE-2019-10745
assign-deep Vulnerable to Prototype Pollution
Unrated
drupal-contrib-2019-065
drupal/imagecache_external - SA-CONTRIB-2019-065
Medium
CVE-2019-14774
Variation Swatches for WooCommerce <= 1.0.61 - Reflected Cross-Site Scripting
High
CVE-2015-9331
Import any XML or CSV File to WordPress <= 3.2.3 & PRO < 4.1.1 - Missing Authorization Checks
Medium
CVE-2017-18564
Sender by BestWebSoft <= 1.2.0 - Reflected Cross-Site Scripting
Medium
CVE-2019-15778
Additional Variation Images Gallery for WooCommerce <= 1.1.28 - Authenticated Stored Cross-Site Scripting
Medium
CVE-2019-15817
Easy Property Listings <= 3.3.3 - Cross-Site Scripting
High
CVE-2019-1258
Vulnerability in Azure Active Directory Authentication Library
Medium
CVE-2019-12397
Cross-site scripting in Apache Ranger
Medium
CVE-2016-10895
Option Tree <= 2.5.5 - Cross-Site Scripting
Unrated
687
kunena - XSS (Cross Site Scripting)
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.