High
CVE-2019-14794
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
High
4ac3dae6-1890-44ba-9671-84f77807ffe5
OneLogin SAML SSO <= 2.8.0 - Distributed Denial-of-Service
Critical
bbd1e68f-1f84-40d6-9ecd-34280c3c5099
Yet Another Stars Rating <= 1.8.6 - Unauthenticated PHP Object Injection
Low
CVE-2019-3774
Low severity vulnerability that affects org.springframework.batch:spring-batch-core
Critical
CVE-2019-3773
Vulnerability that affects org.springframework.ws:spring-ws and org.springframework.ws:spring-xml
Low
CVE-2019-3772
Improper Restriction of XML External Entity Reference in org.springframework.integration:spring-integration-ws and org.springframework.integration:spring-integration-xml
Medium
CVE-2019-6802
CRLF Injection in pypiserver
Medium
CVE-2019-6780
Wise Chat <= 2.6.3 - Reverse Tabnabbing
High
bfd16372-9173-4168-8604-5c117d05c349
Health Check & Troubleshooting <= 1.2.3 - Cross-Site Request Forgery
Medium
95ad0139-eb12-4c02-95fb-cd19b6a6ab02
Health Check & Troubleshooting <= 1.2.3 - Path Traversal
Critical
CVE-2019-6703
Total Donations <= 2.0.5 - Missing Authorization to Arbitrary Options Update
Unrated
drupal-contrib-2019-010
drupal/cleantalk - SA-CONTRIB-2019-010
High
CVE-2018-20245
Improper Certificate Validation in Apache Airflow
Critical
CVE-2017-17836
Apache Airflow vulnerable to XSS
High
CVE-2017-17835
Cross-Site Request Forgery (CSRF) in Apache Airflow
High
CVE-2017-15720
Improper Input Validation in Apache Airflow resulting in Remote Code Execution
Unrated
drupal-contrib-2019-004
drupal/preview_link - SA-CONTRIB-2019-004
Unrated
656
JoomCRM
Unrated
655
JoomProject
Unrated
654
J-CruiseReservation
Medium
CVE-2018-20677
bootstrap Cross-site Scripting vulnerability
Medium
CVE-2018-20676
XSS vulnerability that affects bootstrap
Medium
CVE-2016-10735
Bootstrap Cross-site Scripting vulnerability
High
CVE-2018-1320
Improper Input Validation in Apache Thrift
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.