Medium
CVE-2019-14364
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
CVE-2019-15323
Ad Inserter <= 2.4.19 - Authenticated Path Traversal
Medium
CVE-2019-1020013
Sensitive Data Exposure in parse-server
Medium
CVE-2019-15871
LoginPress | Custom Login Page Customizer <= 1.1.13 - Unauthorized Settings Update
High
CVE-2019-13570
AdRotate – Ad manager & AdSense Ads <= 5.2 - Authenticated SQL Injection
High
CVE-2019-15828
One Click SSL <= 1.4.6 - Cross-Site Request Forgery
Critical
CVE-2019-13573
FV Flowplayer Video Player <= 7.3.18.727 - SQL Injection
Critical
CVE-2019-10744
Prototype Pollution in lodash
Unrated
drupal-contrib-2019-055
drupal/config_perms - SA-CONTRIB-2019-055
Medium
1bc19bfa-ce44-4654-b074-c8126b60a155
Hybrid Composer <= 1.4.6 - Missing Authorization to Arbitrary Options Update
Medium
CVE-2019-25060
WPGraphQL <= 0.3.4 - Information Exposure
Medium
CVE-2019-13505
Appointment Hour Booking – WordPress Booking Plugin <= 1.1.45 - Cross-Site Scripting
Medium
CVE-2019-13463
Simple Link Directory < 7.3.5 - Reflected Cross-Site Scripting
Medium
CVE-2019-15829
Gallery PhotoBlocks <= 1.1.42 - Reflected Cross-Site Scripting
Medium
CVE-2019-15830
Icegram <= 1.10.28.2 - Cross-Site Scripting
Medium
CVE-2019-13478
Yoast SEO <= 11.5 - Authenticated Stored Cross Site Scripting
High
CVE-2019-13413
Rencontre – Dating Site <= 3.1.2 - SQL Injection
Medium
d1040d5b-e02d-4762-825f-409c8770c66f
Zoner - Real Estate <= 4.1 - Cross-Site Scripting
Medium
CVE-2019-13414
Rencontre – Dating Site <= 3.1.2 - Cross-Site Scripting
Medium
CVE-2019-14792
WP Google Maps <= 7.11.34 - Cross-Site Request Forgery to Cross-Site Scripting
Critical
CVE-2019-0228
Vulnerability that affects org.apache.pdfbox:pdfbox
Medium
CVE-2017-11429
Authentication bypass via incorrect XML canonicalization and DOM traversal in saml2-js
Critical
CVE-2019-9845
MadsKristensen.AspNetCore.Miniblog subject to Improper Input Validation
High
CVE-2015-5306
Injection vulnerability that affects ironic-discoverd
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.