Critical
05c40628-b8fc-48ff-8819-c0955d69fce0
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
CVE-2018-12545
Uncontrolled Resource Consumption in org.eclipse.jetty:jetty-server
Medium
CVE-2019-15650
Stops Core Theme And Plugin Updates <= 8.0.4 - Insufficient Restrictions on Option Changes
Low
CVE-2019-3828
Ansible Path Traversal vulnerability
Medium
b09c98f2-6492-41e1-8d87-e10ed2ef5f9f
Social Media Share Buttons & Social Sharing Icons <= 2.1.7 - Reflected Cross-Site Scripting
Medium
bf5fe4c5-0a18-4efb-b492-fad2ae3ca3da
Google Adsense & Banner Ads by AdsforWP < 1.6 - Cross-Site Scripting
Medium
1a76571a-f820-4902-afa9-287b59a11d14
Nested Pages <= 3.0.7 - Missing Authorization
Critical
CVE-2019-1010257
article2pdf 0.24 - 0.27 - Information Disclosure
Unrated
663
AcyMailing
High
CVE-2019-5417
Directory Traversal in serve
High
CVE-2019-5415
Path Traversal in serve
Critical
CVE-2019-5413
Code Injection in morgan
High
CVE-2018-12022
jackson-databind Deserialization of Untrusted Data vulnerability
High
CVE-2018-11767
Improper Privilege Management in org.apache.hadoop:hadoop-main
High
CVE-2019-5414
Command Injection in kill-port
High
CVE-2019-5416
Path Traversal in localhost-now
Medium
CVE-2019-0191
Moderate severity vulnerability that affects org.apache.karaf:apache-karaf and org.apache.karaf:karaf
High
934545ff-8886-47c7-ad50-0e5ff513a26c
PWA for WP & AMP Plugin <= 1.0.8 - Cross-Site Scripting
Critical
f8035ed9-d267-44da-9de4-cf3d6ece7059
WP Database Backup <= 5.1.2 - Unauthenticated Settings Update to Remote Code Execution
High
cf48ad3b-9b3a-4052-bacf-52a729d62365
Link Checker <= 1.16.2 - Unauthenticated Stored Cross-Site Scripting
High
8ed9a5df-90d0-4abe-be1c-49c50a6b48b3
Duplicate Page <= 3.3 - SQL Injection
Unrated
661
TCPDF Library - Other
Critical
CVE-2019-7539
ipycache is vulnerable to Code Injection
Critical
CVE-2019-5729
splunk-sdk does not properly verify untrusted TLS server certificates
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.