High
CVE-2019-11872
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Critical
CVE-2019-12300
Improper Authentication in Buildbot
High
CVE-2019-12086
Information exposure in FasterXML jackson-databind
Medium
ghsa-6qqf-vvcr-7qrv
Cryptographically Weak PRNG in generate-password
Medium
ghsa-5f7m-mmpc-qhh4
mysql Node.JS Module Vulnerable to Remote Memory Exposure
Medium
ghsa-pgr8-jg6h-8gw6
Cross-Site Scripting in webpack-bundle-analyzer
Medium
CVE-2019-3799
Path Traversal in Spring Cloud Config
High
CVE-2022-1119
Simple File List <= 3.2.7 - Arbitrary File Download
High
fdfb5e74-e52c-4f44-acdc-9740624af9e7
Simple File List <= 3.2.4 - Arbitrary File Deletion
High
baa063b7-8b79-4de3-84b1-6dec024fa395
Event Management Tickets Booking By Event Monster Plugin < 1.0.6 - Cross-Site Scripting
Unrated
drupal-contrib-2019-050
drupal/menu_item_extras - SA-CONTRIB-2019-050
High
f87e78c5-e7f4-4af6-b64f-444fef23e890
Slimstat Analytics <= 4.8.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
Medium
b19ce745-2cc4-48eb-b5f3-5011be7cceec
W3 Total Cache <= 0.9.7.3 - Server Side Request Forgery
Critical
CVE-2019-12239
WP Booking System Free version < 1.5.2 - Cross-Site Request Forgery
High
56fce928-108d-4e59-8746-3699a9db427e
User Email Verification for WooCommerce <= 3.3.0 - Unauthenticated Arbitrary Options Update
Medium
CVE-2019-15112
WP Slimstat <= 4.8 - Unauthenticated Stored Cross-Site Scripting from Visitors
Medium
CVE-2019-14799
FV Flowplayer Video Player <= 7.3.13.727 - Unauthenticated Stored Cross-Site Scripting
Critical
CVE-2019-14801
FV Flowplayer Video Player <= 7.3.14.727 - SQL Injection
Medium
CVE-2019-14800
FV Flowplayer Video Player <= 7.3.14.727 - Sensitive Information Exposure
High
10e49bdd-3a72-4bb7-ba31-21ba4a5b377f
SAML Single Sign On – SAML SSO Login <= 4.8.75 - Cross-Site Request Forgery
Unrated
676
eXtplorer
High
CVE-2019-15321
Option Tree <= 2.7.2 - Object Injection Bypass
High
CVE-2019-15320
Option Tree <= 2.7.2 - Object Injection Bypass
Medium
cd8389f1-b70d-4d1a-bb25-e219c9099313
Newsletter Manager <= 1.4 - Open Redirect
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.