Critical
CVE-2019-15025
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,593
Medium
CVE-2018-20462
JSmol2WP <= 1.07 - Cross-Site Scripting
Critical
CVE-2024-51792
Audio Record <= 1.0 - Arbitrary File Upload
Critical
CVE-2018-14719
Arbitrary Code Execution in jackson-databind
Critical
CVE-2018-14720
XML External Entity Reference (XXE) in jackson-databind
Critical
CVE-2018-14721
Server-Side Request Forgery (SSRF) in jackson-databind
Critical
CVE-2018-19362
com.fasterxml.jackson.core:jackson-databind vulnerable to Deserialization of Untrusted Data
Critical
CVE-2018-19361
Deserialization of Untrusted Data in jackson-databind
Critical
CVE-2018-19360
Deserialization of Untrusted Data in jackson-databind due to polymorphic deserialization
Critical
CVE-2018-14718
Arbitrary Code Execution in jackson-databind
Medium
CVE-2018-6341
Cross-Site Scripting in react-dom
Medium
CVE-2018-18893
Jinjava calls getClass
Medium
CVE-2018-20594
Moderate severity vulnerability that affects org.hswebframework.web:hsweb-commons
High
CVE-2018-20595
Cross-Site Request Forgery (CSRF) in hswebframework.web:hsweb-commons
High
CVE-2017-18354
rendertron LFI vulnerability
High
CVE-2017-18353
rendertron can remotely shut down Chrome instance
High
CVE-2018-6342
react-dev-utils on Windows vulnerable to Remote Code Execution
High
CVE-2018-14732
Missing Origin Validation in webpack-dev-server
High
CVE-2019-3575
sqla-yaml-fixtures is vulnerable to Code Injection
Critical
ff32cb12-f010-45ae-97d7-f36ce2003f3c
UserPro <= 4.9.20 - Privilege Escalation
Unrated
651
kunena - XSS (Cross Site Scripting)
High
CVE-2018-20556
Booking Calendar <= 8.4.3 - SQL injection
Medium
3f594989-8db3-41c8-9089-b4e2d995270e
Order XML File Export Import for WooCommerce < 1.2.3 - Cross-Site Scripting
Medium
CVE-2018-17197
Apache Tika Denial of Service due to Infinite Loop in Tika's SQLite3Parser
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.